Massive healthcare data breach just exposed the personal info of 1 million Americans — what to do now

An open lock depicting a data breach
(Image credit: Shutterstock)

Going to the doctor can be scary enough as it is but what if all of your sensitive personal and health information were to suddenly end up in the hands of hackers? Well, that’s what just happened to more than one million Americans.

As reported by Cyber Security News, the Connecticut-based health center Community Health Center (CHC) has revealed that it fell victim to a data breach following a cyberattack at the beginning of this year. In addition to regular patients, anyone who took a test or received a vaccine for Covid-19 is also affected.

Here’s everything you need to know about this latest healthcare data breach, what you need to do now if you’re affected and some tips and tricks on how to stay safe from hackers that will undoubtedly use this stolen information in their attacks.

From cyberattack to data breach

A hacker typing quickly on a keyboard

(Image credit: Shutterstock)

According to a regulatory filing with the Maine Attorney General’s Office, 1,060,936 individuals in total are affected by this new breach, which was first detected at the beginning of last month.

After identifying unusual activity on its network, CHC sought the help of cybersecurity experts to investigate the matter and secure the nonprofit’s systems. This investigation determined that a hacker had accessed CHC’s systems and extracted the data they contained.

CHC says that the hacker’s access to its systems was terminated within hours and as of now, there’s no ongoing threat to its network. It is worth noting that the exposed data differs significantly between regular CHC patients and Covid-19 test and vaccine recipients.

CHC patients may have had their names, dates of birth, addresses, phone numbers, emails, diagnoses, treatment details, test results, Social Security numbers (SSNs) and their health insurance information exposed. Meanwhile, Covid-19 test and vaccine recipients who are not regular CHC patients might have had their names, dates of birth, phone numbers, emails, addresses, gender, race, ethnicity and insurance details (if provided) exposed as a result of this breach.

How to stay safe after a data breach

A shocked couple realizing they've been scammed

(Image credit: Shutterstock)

With all of this sensitive personal and medical information in hand, hackers can launch targeted phishing attacks or even commit identity theft against impacted individuals. Fortunately though, CHC is offering free access to the best identity theft protection for two years to patients whose personal and health information was exposed in this breach.

The credit and identity monitoring is through CyberScan and to claim this offer, you’re going to want to keep a close eye on your mailbox. In it, you should find a data breach notification letter with an access code and all the steps needed to get it set up.

Likewise, if your identity does get stolen as a result of this breach, CHC is also including a $1 million insurance reimbursement policy and identity recovery assistance.

At the same time, you’re going to want to carefully monitor your emails, texts and messages on social media for anything suspicious. This is because this stolen data could very well be sold off on the dark web to other hackers who will then use it to launch targeted phishing attacks against impacted individuals.

Since these suspicious emails and messages could contain malware, you’re also going to want to make sure that your PC is protected with the best antivirus software, your Apple computer has the best Mac antivirus software and that you’re using one of the best Android antivirus apps on your Android phone.

Unfortunately with a data breach like this one, there’s nothing you can really do to prevent it from happening. Instead, it’s what you do after the fact that’s the most important here. However, if you sign up for CHC’s free identity theft protection and keep a close eye on all of your emails, messages and financial accounts, you should be okay.

More from Tom's Guide

Anthony Spadafora
Managing Editor Security and Home Office

Anthony Spadafora is the managing editor for security and home office furniture at Tom’s Guide where he covers everything from data breaches to password managers and the best way to cover your whole home or business with Wi-Fi. He also reviews standing desks, office chairs and other home office accessories with a penchant for building desk setups. Before joining the team, Anthony wrote for ITProPortal while living in Korea and later for TechRadar Pro after moving back to the US. Based in Houston, Texas, when he’s not writing Anthony can be found tinkering with PCs and game consoles, managing cables and upgrading his smart home. 

Read more
Image of man on computer with data security ecosystem
Over 900,000 Americans just had their personal and health info exposed in medical data breach — names, phone numbers, treatments and SSNs
A hacker typing quickly on a keyboard
Half a million medical patients just had their addresses, dates of birth, SSNs and more stolen by hackers — how to stay safe
A laptop keyboard showing a warning sign
Data breach at Texas Tech University leaks personal data of 1.4 million patients
An open lock depicting a data breach
Thousands including children exposed in major data breach — names, addresses, Social Security numbers and more accessed by hackers
A picture showing different credit cards stacked on top of each other on a table
5 million Americans just had their credit card details leaked online — what to do now
An open lock depicting a data breach
3.5 million hit in major law firm data breach — full names, SSNs, dates of birth, addresses and more exposed
Latest in Online Security
and image of the Google Chrome logo on a laptop
Google Chrome at risk from shape-shifting browser extensions — how to stay safe
Green skull on smartphone screen.
Over 1 million Android devices infected with password-stealing, pre-installed botnet malware — how to stay safe
Android 12
Google March Android Security Update fixes two high severity vulnerabilities — update now
An Android bot next to an Android TV remote
Millions of Android TVs hijacked in massive botnet — how to see if yours is at risk
Poster of Elon Musk saying "I am stealing from you"
Elon Musk's DOGE blocked from accessing your data – and 3 in 4 Americans agree
A fake text message on a smartphone being held by both hands.
Toll road scams are worse than ever — what to look for and how to stay safe
Latest in News
NYTimes Connections
NYT Connections today hints and answers — Friday, March 7 (#635)
Gboard app logo on mobile phone resting on a keyboard
Google Gboard redesign has already angered users — and I can see why
Reese Witherspoon as Elle Woods (dressed in all pink) holding her dog Bruiser in Legally Blonde
Prime Video top 10 has 3 must-watch movies — including a classic Reese Witherspoon comedy
The Sling TV app button on the Apple TV home screen.
Sling just added 11 free streaming channels — here's what's you can watch
and image of the Google Chrome logo on a laptop
Google Chrome at risk from shape-shifting browser extensions — how to stay safe
YouTube Premium logo on a phone in front of YouTube on a browser
YouTube Premium Lite vs YouTube Premium: What's the difference?