F500 Healthcare Providers · Health Care: Medical Facilities · Data breach
Community Health Systems
Headline
CHS suffered a breach in which an unauthorized actor reportedly gained access on or around February 28, 2026, and the row is a reminder that this is a repeat pattern for the company rather than a first event - CHS has…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
CHS suffered a breach in which an unauthorized actor reportedly gained access on or around February 28, 2026, and the row is a reminder that this is a repeat pattern for the company rather than a first event - CHS has appeared in major breach coverage before. What compounds the harm at rural hospital systems specifically is that CHS operates many facilities that are the only hospital in their county. A patient there cannot respond to a breach by taking their care elsewhere, so the ordinary market consequence that is supposed to discipline this behaviour simply does not arrive.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
VERY RECENT BREACH (unauthorized access on or around Feb 28, 2026, per a plaintiffs' firm notice; publicly disclosed around April 29, 2026): Community Health Systems (CHS) discovered unusual network activity, leading to an investigation with third-party specialists that confirmed unauthorized access to certain network data — a comprehensive review of the full scope remained ongoing as of April 2026; no later scope update was located in this review (Oct 2026). CORRECTION: an earlier draft attributed a MyChart Meta Pixel settlement (class period Jan 1, 2020 - Dec 11, 2025) to CHS; that settlement belongs to Catholic Health System, a different organization. No CHS-specific MyChart pixel settlement was located in this review.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy chs.net/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service chs.net/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.