Double Click
Breaking down the industry’s major story
Healthcare provider data breach impacts 1 million Americans
Community Health Center (CHC), a Connecticut-based healthcare provider, recently confirmed a data breach affecting over 1 million patients. While the cyberattack was initially detected on January 2nd, 2025, the official filing revealed that it likely occurred on October 14th, 2024.
CHC said that a “skilled criminal hacker” accessed sensitive patient data, including names, birthdates, addresses, medical records, Social Security numbers, and health insurance details. Despite this, the healthcare provider reassured patients that no data was deleted, no files were locked, and its daily operations were not disrupted. The hacker’s access was reportedly blocked within hours of discovery.
In response, CHC has enhanced security measures, added monitoring software, and hired experts to investigate. To protect affected individuals, CHC is offering free identity theft protection through IDX and a $1,000,000 insurance reimbursement policy. While no misuse of the stolen data has been reported, patients are encouraged to enroll in protection services for added security.
What's the lesson here?
Cyberattacks on healthcare providers have been rising across the U.S. 84% of healthcare organizations reported incidents in the past year, according to a report by Netwrix. Medical data is sensitive and these breaches obviously raise concerns for patients and stakeholders—so much so that the HHS has proposed HIPAA updates to combat the surge.
Keeping health data safe has never been more important. One of the ways you can protect your organization is by teaming up with a trusted, reliable partner for HIPAA-compliant data backup and recovery—they can help you meet compliance obligations without compromising on security or ease of access to backed-up data.
What other topics are trending?
The Soapbox
Online conversations you don't want to miss
99 problems: What are some of the biggest issues we face today in cybersecurity?