Cempa Community Care Reports Data Breach Affecting 1,341 Individuals via Third-Party Vendor On January 30, 2026, Cempa Community Care a Chattanooga, Tennessee-based nonprofit health organization disclosed a data breach impacting 1,341 individuals across the U.S. The incident did not originate from Cempa’s systems but from a breach at an unnamed electronic health record (EHR) vendor. The unauthorized access occurred through a subcontractor providing insurance eligibility transaction services for the vendor. Exposed data included highly sensitive information: names, addresses, dates of birth, Social Security numbers, health insurance details (including Medicare identifiers), provider names, and other demographic or health-related records. The breach was reported to the U.S. Department of Health and Human Services (HHS) on the same day, with details posted on the HHS breach portal. The affected vendor responded by securing its systems, containing the unauthorized activity, and engaging cybersecurity experts to investigate. Cempa Community Care is offering complimentary identity monitoring and fraud assistance through Kroll to impacted individuals, with enrollment instructions to be mailed directly. Those with questions may contact Cempa’s Director of Compliance, Melissa White, at 423-265-2273 or via email.