Skip to content
Network USA

HHS OCR report ยท 2025

The Brien Center for Mental Health and Substance Abuse Services data breach

The Brien Center for Mental Health and Substance Abuse Services, a healthcare provider in Massachusetts, reported a breach affecting 5,427 individuals to HHS OCR on Jul 18, 2025.

OCR report facts

Covered entity
The Brien Center for Mental Health and Substance Abuse Services
Entity type
Healthcare Provider
Individuals affected
5,427
Submission date
Jul 18, 2025
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
No
Status
Archive (closed)

OCR description

The Brien Center for Mental Health and Substance Abuse Services, the covered entity (CE) reported that an unauthorized third-party gained access to its network and accessed or acquired the protected health information (PHI) of 5,427 individuals. The PHI involved included demographic and clinical diagnostic information. The CE notified HHS and the affected individuals. OCR provided technical assistance regarding the HIPAA Rules. In its mitigation efforts, the CE implemented additional administ...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the The Brien Center for Mental Health and Substance Abuse Services data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from The Brien Center for Mental Health and Substance Abuse Services legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or The Brien Center for Mental Health and Substance Abuse Services.