Erie Family Health Centers Breach Exposes PHI and Personal Data of 570,000

Erie Family Health Centers, a Chicago-area healthcare provider, disclosed a network intrusion that exposed sensitive personal information and protected health information for more than 570,000 individuals. The organization said an unauthorized third party had access to its network from December 10, 2025, through January 27, 2026, when suspicious activity was detected and an investigation began. Impacted data varied by person but included identifiers such as Social Security numbers, financial account information, online credentials, biometric data, and medical treatment, diagnosis, and other health records.

Erie said it secured the affected network, brought in third-party digital forensics and cybersecurity experts, notified law enforcement, and reported the incident to the U.S. Department of Health and Human Services Office for Civil Rights. The provider also said it strengthened security controls and is offering affected individuals complimentary credit monitoring and identity theft protection. No threat group had publicly claimed responsibility, and Erie had not disclosed attribution, the amount of data taken, or whether the intrusion involved a ransom demand.