MA · HHS OCR reports
HIPAA breaches in Massachusetts
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Massachusetts.
Reports
245
Individuals affected
28,784,150
Under investigation
22
Top type: Hacking/IT Incident
State breach notification law
Mass. Gen. Laws ch. 93H, §§ 1-6 (General Laws Chapter 93H - Security Breaches) (amended 2019)
Timing: notify affected individuals 'as soon as practicable and without unreasonable delay' with no specific day
Read the Massachusetts data breach notification law summaryAll reports, newest first
Page 3 of 5. 245 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Harvard Pilgrim Health Care | Health Plan | 2,662,337 | May 24, 2023 | Hacking/IT Incident | Archive (closed) |
| AllCare Plus Pharmacy, Inc. | Healthcare Provider | 757 | Mar 15, 2023 | Hacking/IT Incident | Archive (closed) |
| ZOLL Services LLC | Healthcare Provider | 997,097 | Mar 10, 2023 | Hacking/IT Incident | Archive (closed) |
| Codman Square Health Center | Healthcare Provider | 10,161 | Mar 1, 2023 | Hacking/IT Incident | Archive (closed) |
| Lawrence General Hospital | Healthcare Provider | 76,571 | Feb 23, 2023 | Hacking/IT Incident | Archive (closed) |
| Vitra Health, Inc. | Healthcare Provider | 1,618 | Feb 6, 2023 | Hacking/IT Incident | Archive (closed) |
| DotHouse Health Incorporated | Healthcare Provider | 10,000 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Minuteman Senior Services | Healthcare Provider | 3,381 | Jan 27, 2023 | Hacking/IT Incident | Archive (closed) |
| Insulet Corporation | Healthcare Provider | 29,000 | Jan 5, 2023 | Unauthorized Access/Disclosure | Archive (closed) |
| L. Knife & Son, Inc. Employee Benefits Plan | Health Plan | 4,082 | Dec 30, 2022 | Hacking/IT Incident | Archive (closed) |
| Pediatrics West, P.C. | Healthcare Provider | 62,924 | Dec 9, 2022 | Hacking/IT Incident | Archive (closed) |
| Nuance Communications, Inc. | Business Associate | 4,830 | Nov 18, 2022 | Unauthorized Access/Disclosure | Archive (closed) |
| Stanley Street Treatment and Resources, Inc. | Healthcare Provider | 45,785 | Nov 11, 2022 | Hacking/IT Incident | Archive (closed) |
| Lifeline Systems Company | Healthcare Provider | 72,848 | Oct 16, 2022 | Hacking/IT Incident | Archive (closed) |
| Minuteman Senior Services | Healthcare Provider | 11,330 | Jul 29, 2022 | Hacking/IT Incident | Archive (closed) |
| Center for Sight, Inc. | Healthcare Provider | 41,041 | Jun 20, 2022 | Hacking/IT Incident | Archive (closed) |
| Shields Health Care Group, Inc. | Business Associate | 2,380,483 | May 27, 2022 | Hacking/IT Incident | Archive (closed) |
| Comstar, LLC | Business Associate | 585,621 | May 26, 2022 | Hacking/IT Incident | Archive (closed) |
| Behavioral Health Partners of Metrowest, LLC. | Business Associate | 10,920 | May 12, 2022 | Hacking/IT Incident | Archive (closed) |
| Trinity Home Care, Inc. | Healthcare Provider | 1,541 | Mar 14, 2022 | Hacking/IT Incident | Archive (closed) |
| UMass Memorial Health Care | Business Associate | 4,270 | Feb 28, 2022 | Hacking/IT Incident | Archive (closed) |
| Medical Healthcare Solutions, Inc. | Business Associate | 133,997 | Jan 22, 2022 | Hacking/IT Incident | Archive (closed) |
| Advocates, Inc. | Healthcare Provider | 70,031 | Jan 21, 2022 | Hacking/IT Incident | Archive (closed) |
| Brockton Hospital, Inc. d/b/a Signature Healthcare Brockton Hospital | Healthcare Provider | 73,022 | Jan 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Sherrill House, Inc. | Healthcare Provider | 5,006 | Jan 3, 2022 | Hacking/IT Incident | Archive (closed) |
| Boston Medical Center | Healthcare Provider | 723 | Nov 24, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| UMass Memorial Health Care, Inc. | Business Associate | 209,048 | Oct 15, 2021 | Hacking/IT Incident | Archive (closed) |
| ReproSource Fertility Diagnostics, Inc. | Healthcare Provider | 253,774 | Oct 8, 2021 | Hacking/IT Incident | Archive (closed) |
| Nova Biomedical Corporation | Health Plan | 3,774 | Aug 17, 2021 | Hacking/IT Incident | Archive (closed) |
| Standard Modern Company, Inc. | Business Associate | 2,707 | Jul 20, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Steward Medical Group | Healthcare Provider | 640 | Jun 4, 2021 | Hacking/IT Incident | Archive (closed) |
| Sturdy Memorial Hospital | Healthcare Provider | 57,379 | May 28, 2021 | Hacking/IT Incident | Archive (closed) |
| Center for Human Development | Healthcare Provider | 15,665 | May 25, 2021 | Hacking/IT Incident | Archive (closed) |
| New England Dermatology and Laser Center, P.C. | Healthcare Provider | 58,106 | May 11, 2021 | Improper Disposal | Archive (closed) |
| Boston Children’s Hospital | Healthcare Provider | 506 | Apr 29, 2021 | Hacking/IT Incident | Archive (closed) |
| Harbor Health Services, Inc. | Healthcare Provider | 901 | Apr 9, 2021 | Hacking/IT Incident | Archive (closed) |
| Harrington Physician Services | Healthcare Provider | 4,393 | Apr 8, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Insulet Corporation | Healthcare Provider | 9,050 | Mar 19, 2021 | Hacking/IT Incident | Archive (closed) |
| Stavros Center for Independent Living Inc. | Healthcare Provider | 2,347 | Mar 18, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Serenity Care PACE | Healthcare Provider | 658 | Mar 16, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| New Bedford Jewish Convalescent Home, Inc. | Healthcare Provider | 873 | Mar 2, 2021 | Hacking/IT Incident | Archive (closed) |
| The Home for the Little Wanderers | Healthcare Provider | 5,396 | Feb 26, 2021 | Unauthorized Access/Disclosure | Archive (closed) |
| Lynn Community Health, Incorporated | Healthcare Provider | 1,800 | Jan 22, 2021 | Hacking/IT Incident | Archive (closed) |
| Greater New Bedford Community Health Center | Healthcare Provider | 696 | Jan 12, 2021 | Hacking/IT Incident | Archive (closed) |
| Mattapan Community Health Center | Healthcare Provider | 4,073 | Dec 31, 2020 | Hacking/IT Incident | Archive (closed) |
| Riverside Community Care, Inc. | Healthcare Provider | 6,978 | Dec 23, 2020 | Hacking/IT Incident | Archive (closed) |
| Brigham and Women’s Hospital | Healthcare Provider | 882 | Dec 8, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
| Family Health Center of Worcester | Healthcare Provider | 566 | Dec 4, 2020 | Hacking/IT Incident | Archive (closed) |
| Tufts Health Plan | Health Plan | 60,545 | Nov 25, 2020 | Hacking/IT Incident | Archive (closed) |
| Harvard Pilgrim Health Care, Inc. | Business Associate | 8,027 | Nov 20, 2020 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.