Erie Family Health Centers

Profile narrative

The organization operates under the alias Erie Family Health Centers, which delivers primary care and preventive health services to individuals and families in the communities it serves. As a health center, it provides medical examinations, chronic disease management, immunizations, and wellness programs aimed at improving population health. Under the alias Catalyst Brands LLC, the same entity manages business functions that include human resources and payroll administration for its workforce. The organization’s headquarters is located in the United States of America, indicating a domestic focus for its operations. Its services are directed toward patients seeking accessible healthcare as well as employees whose employment data are processed through its HR and payroll systems. The dual naming reflects a structure where clinical care and corporate administration are conducted under distinct brand names.

The organization has been subject to two publicly reported cybersecurity incidents that illustrate the sensitivity of the information it handles. In May 2026, Catalyst Brands LLC experienced a ransomware attack on its HR and payroll servers, leading to the exposure of personal identifiers such as names, Social Security numbers, and financial account details. In December 2025, Erie Family Health Centers detected a network intrusion that persisted for several weeks and compromised names, contact information, Social Security numbers, driver’s license numbers, passport numbers, online credentials, financial data, and medical information for approximately 570,000 individuals. These events underscore the organization’s responsibility to protect both health‑related and employment‑related data under applicable privacy regulations. The incidents also highlight the organization’s need for robust incident detection and response capabilities across its clinical and corporate environments. No explicit details about the organization’s size, annual revenue, or subsidiary relationships are provided in the source material. Consequently, the profile is limited to the confirmed facts regarding its aliases, location, service focus, and the documented breaches.

Incidents

2 incidents linked to this organisation.