HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of March 31, 2025.
- Organization as reported
- Family Centers, Inc., CT
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- March 31, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9374, row:513)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Family Center’s Inc., reported that an unauthorized actor obtained access to its computer system and exfiltrated certain files. The CE reported that the PHI included demographic and clinical/treatment for 12,142 individuals. Following the discovery of the incident, the CE provided notice to HHS, the affected individuals, and the media. In response to the breach, the CE changed and strengthened passwords, reviewed and reinforced multi-factor authentication, worked with a forensic specialist to remove malicious programs, updated its Security Awareness and Training policy, retrained staff on HIPAA policies and procedures, and continued and expanded its cybersecurity arrangements with a third-party security vendor.