Continuum Health Alliance
Disclosed Apr 1, 20242 years ago377,119 affectedConfirmed
The business associate (BA), Continuum Health Alliance. reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 377,119 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, drivers’ license numbers, diagnoses/conditions, and other treatment information. The BA notified HHS, the media, the affected individuals, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
| People affected | 377,119 (as reported by the organization) |
|---|---|
| Disclosed | Apr 1, 2024 |
| Happened | Oct 18, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-08-21 Continuum Health Alliance Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-04-30 Continuum Health Alliance Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Continuum Health Alliancein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Continuum Health Alliance (Business Associate, NJ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 1, 2024 | 377,119 |
| Indiana AGresidents of IN | Apr 29, 2024 | 34 |
| Vermont AGresidents of VT | Apr 30, 2024 | |
| Vermont AGresidents of VT | Aug 21, 2024 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2024-04-29 to 2024-04-01 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Continuum Health Alliance. reported that it experienced a cybersecurity incident that affected the protected health information (PHI) of 377,119 individuals. The PHI involved included names, addresses, dates of · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 377119 · backfill source
- 2026-09-25 · disclosed: 2024-04-30 to 2024-04-29 · backfill source
- 2026-09-25 · occurred: empty to 2023-10-18 · backfill source
- 2026-09-25 · disclosed: 2024-08-21 to 2024-04-30 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.