Strauss Borrelli PLLC, a leading data breach law firm, is investigating Heartland Community Health Center (“Heartland”) regarding its recent data breach. The Heartland data breach may have involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT HEARTLAND COMMUNITY HEALTH CENTER:
Heartland is an integrated primary healthcare practice based in Kansas. Founded in 2004, Heartland provides a variety of healthcare services, including primary care, behavioral health, and dental healthcare.3 Additionally, Heartland offers medication assisted treatment for substance use disorder, peer support services, Ryan White Medical Case Management, Compass – insurance eligibility assistance, nutrition education classes, food pantry, Spanish language medical interpretation and care coordination.3 Headquartered in Lawrence, Kansas, Heartland has two additional locations in Lawrence, Kansas, and employs over 200 individuals.
WHAT HAPPENED?
Recently, Heartland reported to the Attorney General of New Hampshire that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. According to the breach notice, on October 1, 2024, Heartland became aware of suspicious activity related to a single employee email account.1 As a result, Heartland launched an investigation to determine the nature of the incident.
Through its investigation, Heartland confirmed that sensitive personal information in its systems may have been compromised by an unauthorized third party between October 1 and October 2, 2024. As a result, Heartland began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On January 10, 2025, Heartland completed this review. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth
- Contact information (e.g., phone number, email address)
- Driver’s license/state identification number
- Medical information (e.g., medical diagnosis/treatment information, prescription information, date of service, patient ID number, provider name, medical record number)
- Medicare/Medicaid number
- Health insurance information (e.g., health insurance claim number, health insurance policy number, treatment cost information)
On February 10, 2025, Heartland began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to New Hampshire residents, Heartland is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that Heartland filed with the Attorney General of New Hampshire is below.
If you are a received a breach notification letter from Heartland Community Health Center:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
