By HFT Staff

Community Health Center of Buffalo Inc., (CHCB) is issuing notice of a recent data security event involving patient information. 

On April 21, 2026, CHCB became aware of suspicious activity within its computer network. In response, CHCB promptly took immediate action to further secure its network to avoid any substantial interruption to patient care. Additionally, CHCB launched an investigation, with the assistance of digital forensic and cybersecurity specialists, to determine the nature and scope of the activity.  

The investigation determined that there had been access to CHCB’s network by an unknown actor on April 20, 2026, and April 21, 2026. During that period of unauthorized access, certain files were accessed and/or acquired without CHCB’s authorization. CHCB is currently conducting a detailed review of the involved data and will be providing written notice of this event to potentially impacted individuals. In the meantime, CHCB is providing this notice on our website homepage to make patients aware of the event. 

CHCB’s review of the impacted data is ongoing. CHCB will be providing written notice to those individuals whose information was potentially impacted with an offer of complimentary credit monitoring and identity theft protection services.  

That being said, it is expected that the following types of information were impacted in the event: name, address, date of birth, Social Security number, driver’s license, and medical and/or health insurance information including, but not limited to, prescription information, treatment location and information, medical diagnosis/condition, lab results, medications, medical record numbers, provider name, patient medical history, health insurance policy information and identification numbers, and other similar types of information. 

CHCB is working to review its existing policies and procedures. CHCB will also be mailing notification letters to potentially impacted individuals and are notifying regulators as required.