Community Health Network

Disclosed May 5, 20221,237 affectedConfirmed

OCR opened a compliance review into the covered entity (CE), Community Health Network, due to its potential use of online tracking technology. In response to the compliance review, the CE determined that the protected health information (PHI) of 1,237 individuals was impermissibly disclosed to third-party tracking technology vendors, such as Facebook and Google. The PHI involved included names, health insurance information, IP addresses, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE ceased using online tacking technology and implemented additional administrative and technical safeguards.

What is known

People affected	1,237 (as reported to HHS)
Disclosed	May 5, 2022
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticein.gov

Indiana Attorney General 2023 data breach report: Community Health Network

Official noticein.gov

Indiana Attorney General 2022 data breach report: Community Health Network

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Community Health Network (Business Associate, IN)

Notices filed

Residents of INMay 5, 2022

Indiana AG2 people

Residents of INSep 16, 2022

Indiana AG1 person

TotalJan 13, 2023

HHS archive1,237 people

Other breaches at Community Health Network

Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedHealthcareUSSep 15 Hacking breachHacking exposed names and health records. Reported to the HHS archive.21K affectedHealthcareUSNov 17, 2023 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.2 affectedHealthcareUSSep 15, 2021 Hacking breachHacking exposed names and health records. Reported to the HHS archive.81K affectedHealthcareUSMay 14, 2020 Hacking breachHacking exposed names and health records. Reported to the HHS archive.3,600 affectedHealthcareUSMay 6, 2019 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.6,600 affectedHealthcareUSJan 23, 2019 Breach, details not statedBreach notice filed with the Indiana AG, details not stated.25 affectedHealthcareUSNov 14, 2016 Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.650 affectedHealthcareUSNov 21, 2014

History of this record

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

2 to 1237by backfillSource

summary2026-09-25

empty to OCR opened a compliance review into the covered entity (CE), Community Health Network, due to its potential use of online tracking technology. In response to the compliance review, the CE determined that the protected health information (PHby backfillSource

records2026-09-25

1 to 2by backfillSource

disclosed2026-09-25

2022-09-16 to 2022-05-05by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Community Health Network