Community Health Center of Buffalo (CHCB) detected suspicious activity within its network on April 21, 2026, which an investigation determined was unauthorized access occurring from April 20-21, 2026. CHCB reported the incident to the U.S. Department of Health and Human Services on June 19, 2026.
The breach exposed data types including Social Security Numbers, Dates of Birth, Addresses, Names, Driver's Licenses, prescription information, treatment location, medical diagnoses/conditions, lab results, medications, medical record numbers, provider names, patient medical history, and health insurance policy information. The exact number of affected individuals has not yet been confirmed, as CHCB is reviewing the data and plans to send written notices to those potentially affected. While CHCB is a Buffalo, NY-based provider, the full extent of affected states remains unclear.
Details regarding the incident can emerge as CHCB completes its data review and notification process. Official notices to consumers are planned but have not yet been sent. There are no confirmed public Attorney General filings as of July 2026.