Technology
Huge healthcare data breach exposes over 1 million Americans' sensitive information
The healthcare industry has recently been a major target for hackers. You might remember the 2024 Ascension attack, which led to significant disruptions.
The Change Healthcare breach was also on a massive scale. UnitedHealth initially claimed that 100 million Americans were affected, but later raised that number to 190 million.
There have been countless other incidents, and now you can add another to the list. Community Health Center, Inc. (CHC), a Connecticut-based federally qualified health center, has disclosed a data breach following a criminal cyberattack on its systems.
The attack has affected over a million people in the U.S.
GET SECURITY ALERTS, EXPERT TIPS — SIGN UP FOR KURT’S NEWSLETTER — THE CYBERGUY REPORT HERE
A healthcare professional working on her laptop. (Kurt “CyberGuy” Knutsson)
What You Need to Know
Community Health Center, Inc. (CHC) detected a data breach on Jan. 2 after identifying unusual activity within its computer systems. An investigation confirmed that a skilled hacker had accessed and extracted data but did not delete or lock any information. If CHC’s claims are accurate, this is a positive outcome, as hackers often deploy ransomware, a type of attack in which they lock systems and demand payment before restoring access.
In a regulatory filing with the Maine Attorney General’s Office, CHC said that 1,060,936 people were affected by the data breach. The type of information compromised varies depending on an individual’s relationship with CHC. Patient data that may have been accessed includes names, dates of birth, addresses, phone numbers, email addresses, diagnoses, treatment details, test results, Social Security numbers and health insurance information.
WHAT IS ARTIFICIAL INTELLIGENCE (AI)?
For individuals who are not regular CHC patients but received COVID-19 services at a CHC clinic, the breached data may include names, dates of birth, phone numbers, email addresses, addresses, gender, race, ethnicity and insurance details if provided. Additional information, such as test dates, results and vaccine details, including type, dose and administration date, may also have been affected. In rare cases, Social Security numbers were also included in the breach.
The organization did not disclose how the hackers gained access to the data or whether proper cybersecurity measures were in place at the time of the breach. While CHC has assured that its systems are no longer at risk, the same cannot be said for its patients, who may now be targets of various cyberattacks.
A healthcare worker looking at information on his phone. (Kurt “CyberGuy” Knutsson)
THE HIDDEN COSTS OF FREE APPS: YOUR PERSONAL INFORMATION
CHC’s response
CHC said the hacker’s access was terminated within hours, and daily operations were not disrupted. To strengthen cybersecurity, CHC claims it has implemented advanced monitoring software and reinforced system protections. The organization said there is no evidence at this time that the compromised data has been misused.
The health center is offering free identity theft protection services for all patients and COVID-19 service recipients whose Social Security numbers were involved in the breach. The organization is also encouraging individuals whose Social Security numbers were not affected to take additional steps to protect their information.
Illustration of a hacker at work. (Kurt “CyberGuy” Knutsson)
HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET
6 ways to protect yourself from Change Healthcare data breach
1. Remove your personal information from the internet: The breach has exposed sensitive personal data, making it essential to reduce your online footprint. While no service can guarantee complete data removal, a reputable data removal service can significantly limit your exposure. These services systematically monitor and erase your personal information from numerous websites and data brokers. Check out my top picks for data removal services here.
2. Be wary of mailbox communications: With addresses among the compromised data, scammers may exploit this breach to send fraudulent letters. Be aware of mail claiming missed deliveries, account suspensions or security alerts. Always verify the authenticity of such communications before responding or taking action.
3. Be cautious of phishing attempts and use strong antivirus software: Scammers may use your compromised email or phone number to target you with phishing attacks. Be wary of messages asking for personal information or containing suspicious links. To protect yourself, ensure strong antivirus software is installed on all your devices. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices.
4. Monitor your accounts: Given the scope of this breach, regular monitoring of your bank accounts, credit card statements and other financial accounts is critical. Look for unauthorized transactions or suspicious activity, and report any issues immediately to your bank or credit card provider.
5. Recognize and report a Social Security scam: If your Social Security number is exposed, you could become a target for related scams. Official communication regarding Social Security issues usually comes via mail, not phone calls or emails. Learn more about spotting and reporting scams by visiting the Social Security Administration’s scam information page.
6. Invest in identity theft protection: Data breaches happen every day, and most never make the headlines, but with an identity theft protection service, you’ll be notified if and when you are affected. An identity theft protection service can monitor personal information like your Social Security number (SSN), phone number and email address and alert you if it is being sold on the dark web or being used to open an account. It can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.
One of the best parts of using an identity theft protection service is that it might include identity theft insurance of up to $1 million to cover losses and legal fees and a white glove fraud resolution team where a U.S.-based case manager helps you recover any losses. See my tips and best picks on how to protect yourself from identity theft.
MASSIVE SECURITY FLAW PUTS MOST POPULAR BROWSERS AT RISK ON MAC
Kurt’s key takeaway
The CHC breach may not be as large as the UnitedHealth attack, but with over a million individuals affected, it’s still a serious incident. Cybercriminals can exploit stolen data in various ways, from identity theft to targeted phishing scams. While CHC has taken steps to secure its systems, those impacted should remain vigilant. Be wary of unexpected emails, calls or messages requesting personal information, and consider monitoring financial and medical accounts for any suspicious activity.
Do you think these companies are doing enough to protect your data, and is the government doing enough to catch those behind cyberattacks? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels for the latest tech tips and tricks:
Answers to the most-asked CyberGuy questions:
New from Kurt:
Copyright 2025 CyberGuy.com. All rights reserved.
Valve has announced the winners of the 2025 Steam Awards and, unsurprisingly, Hollow Knight: Silksong, took home the Game of the Year honors. It was also given the “Best Game You Suck At” award, which, I’m not sure if that’s a good thing or not. Given the relentless fawning over Silksong since its release in September, an event that nearly brought the entire digital video game distribution system to its knees, that it would win Game of the Year felt like something of a forgone conclusion.
The Best Game on Steam Deck was awarded to Hades II (an award we’d already unofficially granted it). The mechanics of Hades lend it to being played in short bursts, and the stylized graphics scale down well. Silent Hill f won the Outstanding Visual Style award and, while there’s no denying it’s a gorgeous title, I can’t help but feel like Dream BBQ, with its uniquely hallucinatory visuals, got robbed. Check out the full list of winners and nominees here at the Steam Awards 2025 landing page.
NEWYou can now listen to Fox News articles!
The University of Phoenix has confirmed a major data breach affecting nearly 3.5 million people. The incident traces back to August when attackers accessed the university’s network and quietly stole sensitive information.
The school detected the intrusion on Nov. 21. That discovery came after the attackers listed the university on a public leak site. In early December, the university disclosed the incident, and its parent company filed an 8-K with regulators.
The scope is large. Notification letters filed with Maine’s Attorney General show 3,489,274 individuals were affected. Those affected include current and former students, faculty, staff and suppliers.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
DATA BREACH EXPOSES 400,000 BANK CUSTOMERS’ INFO
The University of Phoenix data breach exposed sensitive personal and financial information tied to nearly 3.5 million people. (Kurt “CyberGuy” Knutsson)
What happened and how attackers got in
According to the university, hackers exploited a zero-day vulnerability in Oracle E-Business Suite. This application handles financial operations and contains highly sensitive data.
Based on the technical details shared so far, security researchers believe the attack aligns with tactics used by the Clop ransomware gang. Clop has a long track record of stealing data through zero-day flaws rather than encrypting systems.
The vulnerability tied to this campaign is tracked as CVE-2025-61882. Investigators say it has been abused since early August.
What data was exposed
The university says the attackers accessed highly sensitive personal and financial information. That includes:
- Full names
- Contact information
- Dates of birth
- Social security numbers
- Bank account numbers
- Routing numbers
This type of data creates a serious risk. It can fuel identity theft, financial fraud and targeted phishing scams.
700CREDIT DATA BREACH EXPOSES SSNS OF 5.8M CONSUMERS
Stolen University of Phoenix records could be used by criminals to launch targeted phishing and identity theft attacks. (Kurt “CyberGuy” Knutsson)
Nearly 3.5 million people affected
In letters sent to affected individuals, the university confirmed the breach affects 3,489,274 people. If you are a current or former student or employee, watch your mail closely.
These notifications often arrive by postal mail, not email. The letter explains what data was exposed and includes instructions for protective services.
We reached out to the University of Phoenix for comment, and a rep provided CyberGuy with the following statement:
“We recently experienced a cybersecurity incident involving the Oracle E-Business Suite software platform. Upon detecting the incident on November 21, 2025, we promptly took steps to investigate and respond with the assistance of leading third-party cybersecurity firms. We are reviewing the impacted data and will provide the required notifications to affected individuals and regulatory entities.”
Free identity protection is now available
The University of Phoenix is offering affected individuals free identity protection services. These include:
- 12 months of credit monitoring
- Identity theft recovery assistance
- Dark web monitoring
- A $1 million fraud reimbursement policy
To enroll, you must use the redemption code provided in the notification letter. Without that code, you cannot activate the service.
This attack fits a larger Clop campaign
The University of Phoenix breach is not an isolated case. Clop has used similar tactics in past campaigns involving GoAnywhere MFT, Accellion FTA, MOVEit Transfer, Cleo and Gladinet CentreStack.
Other universities have also reported Oracle EBS-related incidents. These include Harvard University and the University of Pennsylvania.
The U.S. government is taking notice. The U.S. Department of State is now offering a reward of up to $10 million for information linking Clop’s attacks to a foreign government.
Why colleges are prime targets
Universities store massive amounts of personal data. Student records, financial aid files, payroll systems and donor databases all live under one roof.
Like healthcare organizations, colleges present a high-value target. A single breach can expose years of data tied to millions of people.
MAKE 2026 YOUR MOST PRIVATE YEAR YET BY REMOVING BROKER DATA
Affected University of Phoenix students and staff should act quickly to monitor accounts and protect their identities. (Kurt “CyberGuy” Knutsson)
Steps to stay safe right now
If you believe you may be affected, act quickly. These steps can reduce your risk.
1) Watch for your breach notification letter
Read it carefully. It explains what data was exposed and how to enroll in protection services.
2) Enroll in the free identity protection
First, use the redemption code provided. Because Social Security and banking data are involved, credit monitoring and recovery services matter. Even if you do not qualify for the free service, an identity theft protection service is still a smart move.
In addition, these services actively monitor sensitive details like your Social Security number, phone number and email address. If your information appears on the dark web or if someone tries to open a new account, you receive an alert right away. As a result, many services also help you quickly freeze bank and credit card accounts to limit further fraud.
See my tips and best picks on how to protect yourself from identity theft at Cyberguy.com
3) Use a data removal service
Because this breach exposed names, contact details and other identifiers, reducing what is publicly available about you matters. A data removal service can help remove your personal information from data broker sites, which lowers the risk of targeted phishing or fraud tied to the stolen University of Phoenix records.
While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com
4) Monitor financial accounts daily
Check bank statements and credit card activity for unfamiliar charges. Report anything suspicious immediately.
5) Consider freezing your credit
A credit freeze can stop criminals from opening new accounts in your name. It is free and reversible. To learn more about how to do this, go to Cyberguy.com and search “How to freeze your credit.”
6) Be alert for phishing attempts and use strong antivirus software
Expect more scam emails and phone calls. Criminals may reference the breach to sound legitimate.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com
7) Secure your devices
Keep your operating systems and apps up to date, as attackers often exploit outdated software to gain access. In addition, enable automatic updates and review app permissions to prevent stolen personal data from being combined with device-level access and causing further harm.
Kurt’s key takeaways
The University of Phoenix data breach highlights a growing problem in higher education. When attackers exploit trusted enterprise software, the fallout spreads fast and wide. While free identity protection helps, long-term vigilance matters most. Staying alert can limit damage long after the headlines fade.
If universities cannot protect this level of sensitive data, should students demand stronger cybersecurity standards before enrolling? Let us know by writing to us at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
LG unveiled a whole new line of gaming monitors ahead of CES on Friday. The UltraGear evo line are all high-end monitors covering a range of technologies, but united by 5K resolution and AI upscaling.
The three flagships under the new branding are the 39GX950B, the 27GM950B, and the 52G930B. The first number in the model name indicates the size. The rest of the letters and numbers, well, I’m sure they mean something to someone.
The 39-inch GX9 is an ultrawide 21:9 5K2K dual-mode OLED screen. It can run at its full resolution at 165Hz, or jump to 330Hz for fast-twitch games at WFHD. The 27-inch GM9 uses “New” MiniLEDs, which promise to deliver brighter images compared to OLED, without the blooming often associated with MiniLEDs. Lastly, the 52-inch G9 is an absolutely massive curved display that delivers a 12:9 panoramic view at 240Hz in its native 5K2K resolution.
The GM9 model is particularly interesting since LG makes the panels for Apple’s Pro Display XDR, and word is that the monitor is finally getting a long-overdue update in the near future.
All three monitors will be on display at CES next month, but there’s no word on pricing or availability just yet.
Here’s a partial list of U.S. elected officials opposing Trump’s invasion of Venezuela
Runner fought off mountain lion with stick just weeks before fatal attack on same Colorado trail
Minnesota faces funding deadline after Trump administration freezes childcare payments
San Antonio teen who vanished Christmas Eve found dead by suicide in nearby field after days-long search
What we know about the alleged ISIS-inspired New Year’s Eve terror suspect
Florida High School Football Rankings: Top 25 teams – Oct. 21
Cleary's 21 help Le Moyne down Central Connecticut State 69-64 in OT
How old is Bo Nix? What to know about Oregon quarterback ahead of 2024 NFL Draft
99th annual Pony Swim held in Virginia
Video: ‘It Didn’t Have to Happen This Way:’ U.Va. Faculty Call for Review of Police Response to Protests
Here’s a partial list of U.S. elected officials opposing Trump’s invasion of Venezuela
Crans Montana organises solemn march for the victims • FRANCE 24 English
Kamala Harris blasts Trump administration’s capture of Venezuela’s Maduro as ‘unlawful and unwise’
US Republicans back Trump on Venezuela amid faint MAGA dissent
Who is Delcy Rodríguez, Venezuela’s leader after Maduro’s capture? | CNN
-
Entertainment1 week agoHow the Grinch went from a Yuletide bit player to a Christmas A-lister
-
Connecticut1 week agoSnow Accumulation Estimates Increase For CT: Here Are The County-By-County Projections
-
World6 days agoHamas builds new terror regime in Gaza, recruiting teens amid problematic election
-
Indianapolis, IN1 week agoIndianapolis Colts playoffs: Updated elimination scenario, AFC standings, playoff picture for Week 17
-
Southeast1 week agoTwo attorneys vanish during Florida fishing trip as ‘heartbroken’ wife pleads for help finding them
-
Business1 week agoGoogle is at last letting users swap out embarrassing Gmail addresses without losing their data
-
World1 week agoSnoop Dogg, Lainey Wilson, Huntr/x and Andrea Bocelli Deliver Christmas-Themed Halftime Show for Netflix’s NFL Lions-Vikings Telecast
-
World1 week agoBest of 2025: Top five defining moments in the European Parliament