Community Healthlink
Disclosed Jun 17, 20197 years ago12,522 affectedConfirmed
Community Healthlink, the covered entity (CE), reported that it was the victim of an email phishing scheme. This breach affected 10,385 individuals. The protected health information (PHI) involved included names, dates of birth, social security numbers, client identification numbers, health insurance information, and treatment information. Following the incident, the CE implemented additional technical and security safeguards. The CE notified affected individuals, OCR, and the media of this breach incident. OCR obtained assurances that the CE implemented the corrective actions noted above.
What is known
| People affected | 12,522 (as reported by the organization) |
|---|---|
| Disclosed | Jun 17, 2019 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Maine Attorney General breach notice archive: Community Healthlinkmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Community Healthlink (Healthcare Provider, MA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 17, 2019 | 4,598 |
| Maine AGresidents of ME | Sep 16, 2019 | 1 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn"] to ["names","ssn","health"] · backfill source
- 2026-09-25 · disclosed: 2019-09-16 to 2019-06-17 · backfill source
- 2026-09-25 · summary: empty to Community Healthlink, the covered entity (CE), reported that it was the victim of an email phishing scheme. This breach affected 10,385 individuals. The protected health information (PHI) involved included names, dates of birth, social secu · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Maine AG), confirmed by Maine AG. Record counts are as reported. Not legal advice.