On November 30, 2023, Community Healthcare Network (“CHN”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights following a “major network disruption” in which an unauthorized actor was able to gain access to CHN’s computer network. In this notice, CHN explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers, addresses, phone numbers, dates of birth, health insurance information, health insurance ID number, patient ID numbers, provider names, and service dates. Upon completing its investigation, CHN began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you receive a data breach notification from Community Healthcare Network, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Community Healthcare Network data breach. For more information, please see our recent piece on the topic here.

What Caused the Community Healthcare Network Data Breach?

The Community Healthcare Network data breach was only recently announced, and more information is expected shortly. However, CHN’s filing with the U.S. Department of Health and Human Services Office for Civil Rights provides some important information on what led up to the breach.

According to this source, on October 1, 2023, CHN experienced a major network disruption impacting the organization’s ability to access parts of its computer system. In response, CHN secured its systems, notified law enforcement, and then began working with third-party data security specialists to investigate the incident and any potential impact on patient information.

Ultimately, the Community Healthcare Network investigation confirmed that an unauthorized party was able to access certain files on its system, including those containing confidential patient information.

After learning that sensitive consumer data was accessible to an unauthorized party, Community Healthcare Network reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the CHN investigation is ongoing, the company notes that the breached information may include your name, Social Security number, address, phone number, date of birth, health insurance information, health insurance ID number, patient ID number, provider name, and service date.

On November 30, 2023, Community Healthcare Network filed its notice with the U.S. Department of Health and Human Services Office for Civil Rights. However, in CHN’s November 30, 2023, website notice, the company explains that it will send out data breach letters to all affected patients once its investigation is complete. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Community Healthcare Network

Founded in 1981, Community Healthcare Network is a not-for-profit health system based out of New York City, New York. CHN provides a wide range of services, including primary and behavioral healthcare, dental care, nutrition, wellness, and related support services. CHN comprises 14 health centers throughout Brooklyn, the Bronx, Queens, and Manhattan. Community Healthcare Network employs more than 650 people and generates approximately $60 million in annual revenue.