COMHAR Inc. Discloses Data Breach Impacting Sensitive Health and Personal Information Philadelphia-based nonprofit COMHAR Inc., which provides behavioral health, intellectual disability, HIV/AIDS support, and home healthcare services, recently reported a data breach affecting an undisclosed number of individuals. The organization, founded in 1975, first acknowledged the incident in a public notice on September 4, 2026. The breach came to light after the threat actor Worldleaks posted on the dark web on July 1, 2026, claiming to have stolen COMHAR’s data and threatening to release it within days. COMHAR detected unusual network activity shortly after and engaged third-party cybersecurity specialists to investigate. By July 17, 2026, the investigation confirmed that an unauthorized actor had copied files and folders on or before that date. While the full scope of the breach remains under review, potentially exposed data includes personally identifiable information (PII) and protected health information (PHI), such as names, addresses, dates of birth, Social Security numbers, treatment notes, diagnoses, medications, and health insurance details. COMHAR has begun notifying affected individuals and has established a dedicated helpline (1-888-941-5180) for inquiries, available Monday through Friday from 8 a.m. to 8 p.m. ET. Additional details can also be requested in writing at 100 W. Lehigh Ave., Philadelphia, PA 19133. The investigation into the breach’s full impact is ongoing.