Community Health Center of Buffalo (CHCB) has disclosed a cybersecurity incident in which sensitive personal and health information may have been accessed or acquired. If you received a notice, here is what happened and what steps you can take.
What Happened in the CHCB Data Breach
A network intrusion at a New York health center
According to the health center’s online notice, Community Health Center of Buffalo identified suspicious activity within its computer network on April 21, 2026. With the assistance of digital forensic and cybersecurity experts, the investigation confirmed that an unauthorized actor accessed the network on April 20 and April 21, 2026, retrieving files without authorization.
The center reported that it was reviewing the data involved and would send written notices to potentially affected individuals. The breach was reported to the U.S. Department of Health and Human Services’ Office for Civil Rights on June 19, 2026, and CHCB posted a notice about the security incident on its website. Notification letters were reported to include an offer of complimentary credit monitoring and identity theft protection services.
What Information Was Exposed in the CHCB Breach
The categories of sensitive data involved
According to reporting on the incident, information believed to be impacted included personal information such as names, addresses, dates of birth, Social Security numbers, and driver’s license numbers. Protected health information that may have been exposed reportedly included prescription information, treatment location and information, medical diagnoses and conditions, lab results, medications, medical record numbers, provider names, patient medical history, and health insurance policy information and identification numbers.
This is a broad and sensitive combination of financial identifiers and detailed medical data. When Social Security numbers and medical records are exposed together, affected individuals may face risks of both financial and medical identity theft, which is why prompt enrollment in any offered monitoring is advisable.
Who Is Affected and Why It Matters
Understanding your exposure as a patient
Because the intrusion involved CHCB’s own network, affected individuals are primarily patients whose information the health center maintained. Community health centers serve many patients who rely on them for essential care, which makes the protection of their data particularly important.
The health center indicated it was reviewing the affected files to determine the types of data involved and the specific individuals affected. If you are a current or former CHCB patient, receiving a notification letter is a signal to take protective steps and to understand your options promptly.
Steps to Take If You Were Notified
Protecting yourself after a healthcare data breach
Enroll in the complimentary credit monitoring and identity theft protection offered in your notice, and keep the letter for your records. Monitor your financial accounts and review Explanations of Benefits from your health insurer for services you did not receive, which can indicate medical identity theft.
You may also consider placing a fraud alert or credit freeze and remaining alert to phishing attempts referencing CHCB or the breach. Beyond these steps, a legal professional can help you understand whether you may be entitled to compensation.
Frequently Asked Questions About the CHCB Data Breach
When did the Community Health Center of Buffalo data breach happen?
CHCB identified suspicious activity on April 21, 2026, and confirmed unauthorized network access on April 20 and April 21, 2026. The breach was reported to HHS on June 19, 2026.
What information was exposed in the CHCB breach?
Reporting indicated impacted information may have included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, and a range of protected health information such as diagnoses, medications, lab results, and health insurance details.
Is CHCB offering free credit monitoring?
According to reporting, notification letters included an offer of complimentary credit monitoring and identity theft protection services.
How do I know if I was affected?
If you received a notification letter, or if you are a current or former CHCB patient, your information may have been involved. The center indicated it was reviewing affected files to identify individuals.
Can I take legal action after the CHCB data breach?
You may have legal options if your information was exposed. A legal professional can review your situation during a free consultation.
What should I do first?
Keep your notice, enroll in any monitoring offered, and monitor your financial and insurance statements for unusual activity.
Contact Wilshire Law Firm About the CHCB Data Breach
If your personal or health information was exposed in the Community Health Center of Buffalo data breach, you may be entitled to compensation. Wilshire Law Firm’s nationally recognized, award-winning team can help you understand your rights.
We offer free consultations and free case reviews with a legal professional, and we are available 24/7. There are no fees unless you get paid.
Contact Wilshire Law Firm today to schedule your free case review regarding the Community Health Center of Buffalo data breach.
