Almeida Law Group is investigating a data breach at Boundary Regional Community Health Center dba Kaniksu Community Health. If you were affected, contact Almeida Law Group.
About Boundary Regional Community Health Center dba Kaniksu Community Health
Kaniksu Community Health is a Federally Qualified Health Center (FQHC) headquartered in Sandpoint, Idaho. It provides medical, pediatric, dental, behavioral health, and veteran care to more than 25,000 residents of Bonner and Boundary counties. The organization operates clinic locations in Bonners Ferry, Ponderay, Priest River, and Sandpoint, and runs an on-site pharmacy at its Bonners Ferry location. It is ranked among the top 10% of community health centers nationwide. Because the organization provides a broad range of clinical services, it maintains sensitive patient health and personal information, making the security of its systems and those of its vendors especially important.
What Happened?
Boundary Regional Community Health Center dba Kaniksu Community Health was listed in an HHS Office for Civil Rights breach portal report submitted on July 21st, 2026, identifying a Hacking/IT Incident affecting a network server with a business associate present and approximately 88,000 individuals affected.
The incident did not originate within Kaniksu’s own systems. According to the breach notification letter filed with the Massachusetts Attorney General, on June 26th, 2026, Aesto, LLC — a third-party electronic health data management platform used by Kaniksu — informed Kaniksu that it had experienced a security event involving unauthorized access to its platform, and that patient data belonging to Kaniksu’s population may have been accessed or acquired as a result. The exposed data has been identified as patient names and addresses. Analysis by MedSecLedger suggests the underlying incident at Aesto may date to approximately December 18th, 2025 — meaning Aesto’s notice to Kaniksu arrived roughly 190 days later, potentially exceeding HIPAA’s 60-day business associate notification requirement. Kaniksu has arranged twelve months of identity monitoring through Kroll for affected individuals.
Key Facts at a Glance
- Company or Organization: Boundary Regional Community Health Center dba Kaniksu Community Health
- Industry: Healthcare Provider — Federally Qualified Health Center (FQHC)
- Location: Headquartered in Sandpoint, Idaho, with clinics in Bonners Ferry, Ponderay, Priest River, and Sandpoint, ID
- Incident type: Hacking/IT Incident (third-party business associate, network server)
- Date breach discovered: June 26th, 2026
- Date of consumer notification: July 21st, 2026
- Total persons affected: 88,000
- Identity theft protection offered: 12 months of identity monitoring through Kroll
- Source: HHS OCR Breach Portal; Massachusetts AG breach notification letter; MedSecLedger analysis
What Should You Do?
If you received a notification from Kaniksu Community Health, you should promptly enroll in the twelve months of identity monitoring offered through Kroll before any enrollment deadline passes. Even if you have not yet received a letter, you can place a free fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — to limit the risk of someone opening new accounts in your name. Review your credit reports for unfamiliar accounts or inquiries by visiting AnnualCreditReport.com, and monitor your existing financial accounts for any suspicious activity. If you notice signs of identity theft or fraud, report them at IdentityTheft.gov. Because health information may be involved, you should also review your Explanation of Benefits statements and request copies of your medical records to check for services you did not receive.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
