2026 Community Health Center of Buffalo — network intrusion; 501 patients (Apr)
Data compromised
Per CHCB online notice: names, addresses, dates of birth, SSNs, driver's licenses; PHI including prescriptions, diagnoses/conditions, lab results, medications, MRNs, provider names, medical history, and health insurance policy information
Technical writeup
Verified healthcare data breach — disclosed June 2026. Community Health Center of Buffalo (CHCB), a New York federally qualified health center, detected suspicious network activity April 21, 2026. Forensic specialists determined an unknown actor accessed the network April 20–21, 2026 and retrieved files without authorization. CHCB began notifying affected individuals after review; the U.S. HHS OCR breach portal lists Community Health Center of Buffalo Inc. with 501 individuals affected, submitted June 19, 2026, as a hacking/IT incident on a network server. Compromised categories may include SSNs, driver's licenses, prescriptions, lab results, diagnoses, and insurance information varying by individual.
Root cause
Suspicious network activity detected April 21, 2026; forensic investigation found unauthorized actor accessed CHCB network April 20–21, 2026 and retrieved files without authorization