The Vermont Office of the Attorney General reported a data breach involving Community Health Center, Inc. on January 30, 2025. The breach occurred on January 2, 2025, due to unauthorized access by a skilled criminal hacker that may have compromised personal health information, including names, dates of birth, addresses, phone numbers, email addresses, Social Security numbers, and health insurance information. The total number of individuals affected is currently unknown.

On October 14, 2024, Community Health Center, Inc. suffered an external system breach (hacking), compromising the personal data of 1,060,936 individuals, including 875 Connecticut residents. The incident was detected on January 2, 2025, and reported to the Maine Office of the Attorney General on January 30, 2025. The breach exposed sensitive information, prompting the organization to offer 24 months of identity theft protection, including credit monitoring and recovery services. The scale of the breach—affecting over a million individuals—suggests a large-scale data exfiltration, likely involving personal and possibly medical records, given the nature of the targeted entity (a healthcare provider). The delayed discovery (nearly three months) further exacerbates risks of fraud, identity theft, and long-term reputational damage. The provision of extended identity protection underscores the severity of the potential harm to affected individuals.