Skip to content
Network USA

HHS OCR report ยท 2023

The University of Massachusetts Chan Medical School data breach

The University of Massachusetts Chan Medical School, a business associate in Massachusetts, reported a breach affecting 135,394 individuals to HHS OCR on Aug 21, 2023.

OCR report facts

Covered entity
The University of Massachusetts Chan Medical School
Entity type
Business Associate
Individuals affected
135,394
Submission date
Aug 21, 2023
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
Yes
Status
Archive (closed)

OCR description

The covered entity (CE), The University of Massachusetts Chan Medical School, reported that it was the subject of a cyber-attack that affected the protected health information (PHI) of 135,974 individuals. The PHI involved included names, dates of births, addresses, Social Security numbers, diagnoses, medications, financial and claims information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, t...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the The University of Massachusetts Chan Medical School data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from The University of Massachusetts Chan Medical School legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or The University of Massachusetts Chan Medical School.