Skip to content
Network USA

MA · HHS OCR reports

HIPAA breaches in Massachusetts

HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Massachusetts.

Reports

245

Individuals affected

28,784,150

Under investigation

22

Top type: Hacking/IT Incident

State breach notification law

Mass. Gen. Laws ch. 93H, §§ 1-6 (General Laws Chapter 93H - Security Breaches) (amended 2019)

Timing: notify affected individuals 'as soon as practicable and without unreasonable delay' with no specific day

Read the Massachusetts data breach notification law summary

All reports, newest first

Page 1 of 5. 245 reports.

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityEntity typeIndividualsSubmittedType of breachStatus
Boston Healthcare for the Homeless ProgramHealthcare Provider201,260Aug 10, 2026Hacking/IT IncidentUnder investigation
Indico Data Solutions, Inc.Business Associate4,840Aug 7, 2026Hacking/IT IncidentUnder investigation
Harvard Pilgrim Health Care, Inc.Health Plan1,168Jul 21, 2026Hacking/IT IncidentUnder investigation
DentaQuest, LLCHealth Plan15,000,000Jul 16, 2026Hacking/IT IncidentUnder investigation
Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MAHealthcare Provider311,760Jul 16, 2026Hacking/IT IncidentUnder investigation
TELUS Health (US) LTD.Healthcare Provider2,641Jul 14, 2026Unauthorized Access/DisclosureArchive (closed)
Entyre Care Massachusetts Inc.Healthcare Provider1,680Jul 10, 2026Unauthorized Access/DisclosureArchive (closed)
Sturdy Health, Inc.Healthcare Provider1,006Jun 5, 2026Hacking/IT IncidentUnder investigation
Signature Healthcare CorporationHealthcare Provider500Jun 5, 2026Hacking/IT IncidentUnder investigation
DentaQuestBusiness Associate3,086May 22, 2026Unauthorized Access/DisclosureArchive (closed)
Walpole Area Visiting Nurse Association, Inc.Healthcare Provider566Mar 16, 2026Hacking/IT IncidentArchive (closed)
Community NurseHealthcare Provider6,746Mar 12, 2026Hacking/IT IncidentArchive (closed)
Guardian Home Health Care, LLCHealthcare Provider613Mar 11, 2026Hacking/IT IncidentArchive (closed)
Greater Boston UrologyHealthcare Provider4,717Feb 28, 2026Hacking/IT IncidentArchive (closed)
Access Information Management Shared Services, LLCBusiness Associate1,522Feb 28, 2026Hacking/IT IncidentUnder investigation
Orthopaedic Specialists of Massachusetts, PCHealthcare Provider20,659Feb 26, 2026Hacking/IT IncidentUnder investigation
Commonwealth Care AllianceHealth Plan634Feb 25, 2026Unauthorized Access/DisclosureArchive (closed)
High Point Treatment Center, Inc.Healthcare Provider25,832Jan 30, 2026Hacking/IT IncidentUnder investigation
Middlesex Sheriff's OfficeHealthcare Provider19,080Jan 20, 2026Hacking/IT IncidentUnder investigation
Andover Eye AssociatesHealthcare Provider1,638Dec 31, 2025Hacking/IT IncidentUnder investigation
Baltimore Medical System, Inc.Healthcare Provider501Dec 12, 2025Hacking/IT IncidentUnder investigation
Heywood Healthcare Inc. including Henry Heywood Memorial Hospital, Athol Memorial Hospital, and Heywood Medical Group, Inc. (“Heywood”)Healthcare Provider500Dec 12, 2025Hacking/IT IncidentUnder investigation
Dermatology Associates of ConcordHealthcare Provider501Nov 18, 2025Hacking/IT IncidentUnder investigation
West Suburban Eye Surgery Center LLCBusiness Associate500Nov 11, 2025Unauthorized Access/DisclosureArchive (closed)
North Atlantic States Carpenters Health Benefits FundHealth Plan68,111Oct 17, 2025Hacking/IT IncidentArchive (closed)
Teamsters Union 25 Health Services & Insurance PlanHealth Plan19,231Sep 3, 2025Hacking/IT IncidentUnder investigation
Zelis Healthcare LLCBusiness Associate4,289Aug 12, 2025Unauthorized Access/DisclosureArchive (closed)
Anderson & Kreiger LLPBusiness Associate1,607Aug 8, 2025Hacking/IT IncidentArchive (closed)
Berkshire Health Systems, Inc.Healthcare Provider1,421Jul 30, 2025Unauthorized Access/DisclosureArchive (closed)
The Brien Center for Mental Health and Substance Abuse ServicesHealthcare Provider5,427Jul 18, 2025Hacking/IT IncidentArchive (closed)
Picis Clinical Solutions, Inc. d/b/a MedstreamingBusiness Associate8,840Jul 11, 2025Hacking/IT IncidentUnder investigation
Covenant HealthBusiness Associate7,864Jul 11, 2025Hacking/IT IncidentUnder investigation
Sensata Technologies, Inc. Health and Welfare Benefit PlanHealth Plan15,630Jun 5, 2025Hacking/IT IncidentArchive (closed)
Next Step Healthcare LLCHealthcare Provider12,090May 30, 2025Hacking/IT IncidentUnder investigation
Insulet CorporationHealthcare Provider841May 16, 2025Unauthorized Access/DisclosureUnder investigation
Onsite MammographyBusiness Associate357,265Apr 21, 2025Hacking/IT IncidentArchive (closed)
Bay Cove Human Services, Inc.Healthcare Provider21,295Mar 3, 2025Hacking/IT IncidentArchive (closed)
Mental Health Association Inc.Healthcare Provider12,633Jan 31, 2025Unauthorized Access/DisclosureArchive (closed)
Square Medical Group, LLCHealthcare Provider2,363Jan 15, 2025Unauthorized Access/DisclosureArchive (closed)
Judge Baker Children’s Center dba The Baker Center for Children and FamiliesHealthcare Provider2,715Dec 27, 2024Hacking/IT IncidentArchive (closed)
Massachusetts Department of Mental HealthHealthcare Provider959Dec 16, 2024LossArchive (closed)
Brockton Neighborhood Health CenterHealthcare Provider97,488Dec 13, 2024Hacking/IT IncidentArchive (closed)
Village Pharmacy GroupHealthcare Provider584Nov 18, 2024Hacking/IT IncidentArchive (closed)
athenahealth, Inc.Business Associate1,974Nov 15, 2024Unauthorized Access/DisclosureArchive (closed)
Massachusetts Department of Developmental ServicesHealthcare Provider3,800Nov 8, 2024Hacking/IT IncidentArchive (closed)
Mystic Valley Elder Services, CEBusiness Associate85,133Oct 28, 2024Hacking/IT IncidentArchive (closed)
Gandara Mental Health CenterHealthcare Provider20,024Oct 24, 2024Hacking/IT IncidentUnder investigation
Mystic Valley Elder Services - Business AssociateBusiness Associate2,402Oct 22, 2024Hacking/IT IncidentArchive (closed)
Wellfleet Group, LLCBusiness Associate23,082Oct 8, 2024Unauthorized Access/DisclosureArchive (closed)
Judge Rotenberg Educational CenterHealthcare Provider2,579Oct 3, 2024Hacking/IT IncidentArchive (closed)

Source: HHS OCR Breach Portal, OCR export October 2026.