MA · HHS OCR reports
HIPAA breaches in Massachusetts
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Massachusetts.
Reports
245
Individuals affected
28,784,150
Under investigation
22
Top type: Hacking/IT Incident
State breach notification law
Mass. Gen. Laws ch. 93H, §§ 1-6 (General Laws Chapter 93H - Security Breaches) (amended 2019)
Timing: notify affected individuals 'as soon as practicable and without unreasonable delay' with no specific day
Read the Massachusetts data breach notification law summaryAll reports, newest first
Page 4 of 5. 245 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Lawrence General Hospital | Healthcare Provider | 176,587 | Nov 5, 2020 | Hacking/IT Incident | Archive (closed) |
| Pristine Dental | Healthcare Provider | 1,428 | Nov 5, 2020 | Hacking/IT Incident | Archive (closed) |
| South Shore Hospital | Healthcare Provider | 74,328 | Sep 23, 2020 | Hacking/IT Incident | Archive (closed) |
| UMass Memorial Medical Center | Healthcare Provider | 87,404 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Joslin Diabetes Center | Healthcare Provider | 71,160 | Sep 14, 2020 | Hacking/IT Incident | Archive (closed) |
| Lynn Community Health Center | Healthcare Provider | 4,271 | Sep 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Hebrew SeniorLife, Inc. | Healthcare Provider | 27,244 | Sep 11, 2020 | Hacking/IT Incident | Archive (closed) |
| Behavioral Health Network, Inc. | Healthcare Provider | 129,571 | Jul 27, 2020 | Hacking/IT Incident | Archive (closed) |
| NCP Healthcare Management Company | Business Associate | 78,070 | Jul 17, 2020 | Hacking/IT Incident | Archive (closed) |
| North Shore Pain Management | Healthcare Provider | 12,472 | Jun 18, 2020 | Hacking/IT Incident | Archive (closed) |
| Beacon Health Options, Inc. | Business Associate | 6,723 | Apr 10, 2020 | Loss | Archive (closed) |
| Foundation Medicine, Inc. | Healthcare Provider | 2,999 | Mar 13, 2020 | Hacking/IT Incident | Archive (closed) |
| Shields Health Solutions | Business Associate | 39,762 | Feb 7, 2020 | Hacking/IT Incident | Archive (closed) |
| Massachusetts General Hospital | Healthcare Provider | 9,900 | Aug 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Harbor Health Services, Inc. | Healthcare Provider | 17,380 | Aug 9, 2019 | Hacking/IT Incident | Archive (closed) |
| Rogerson House, Inc. | Healthcare Provider | 500 | Jul 12, 2019 | Hacking/IT Incident | Archive (closed) |
| Community Healthlink | Healthcare Provider | 4,598 | Jun 17, 2019 | Hacking/IT Incident | Archive (closed) |
| Worcester Eye Consultants | Healthcare Provider | 2,634 | Jun 7, 2019 | Loss | Archive (closed) |
| Doctors Management Services, Inc. | Business Associate | 206,695 | Apr 22, 2019 | Hacking/IT Incident | Archive (closed) |
| Baystate Health | Healthcare Provider | 11,658 | Apr 5, 2019 | Hacking/IT Incident | Archive (closed) |
| Emerson Hospital | Healthcare Provider | 6,314 | Mar 8, 2019 | Unauthorized Access/Disclosure | Archive (closed) |
| RSC Insurance Brokerage, Inc. | Business Associate | 2,088 | Mar 1, 2019 | Theft | Archive (closed) |
| Blue Cross Blue Shield of Massachusetts | Health Plan | 1,262 | Feb 15, 2019 | Hacking/IT Incident | Archive (closed) |
| Massachusetts General Hospital | Healthcare Provider | 588 | Dec 14, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Steward Medical Group | Healthcare Provider | 16,276 | Nov 28, 2018 | Hacking/IT Incident | Archive (closed) |
| Leominster Dermatology LLP | Healthcare Provider | 500 | Sep 13, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Boston Health Care for the Homeless Program | Healthcare Provider | 861 | Sep 7, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Reliable Respiratory | Healthcare Provider | 21,311 | Sep 1, 2018 | Hacking/IT Incident | Archive (closed) |
| Longwood Orthopedic Associates, Inc. | Healthcare Provider | 10,000 | Jul 27, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| New England Dermatology, P.C. | Healthcare Provider | 16,154 | Jul 13, 2018 | Improper Disposal | Archive (closed) |
| Home for Little Wanderers | Healthcare Provider | 861 | Jul 3, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| New England Baptist Health | Healthcare Provider | 7,582 | Jun 8, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Baystate Family Dental, Inc. | Healthcare Provider | 500 | May 4, 2018 | Theft | Archive (closed) |
| Cambridge Health Alliance | Healthcare Provider | 2,280 | Mar 28, 2018 | Hacking/IT Incident | Archive (closed) |
| CareMeridian, LLC | Healthcare Provider | 1,922 | Mar 21, 2018 | Loss | Archive (closed) |
| Center for Comprehensive Services, Inc. | Healthcare Provider | 1,176 | Mar 21, 2018 | Loss | Archive (closed) |
| National Mentor Healthcare, LLC. | Healthcare Provider | 1,015 | Mar 21, 2018 | Loss | Archive (closed) |
| Mentor ABI, LLC | Healthcare Provider | 994 | Mar 21, 2018 | Loss | Archive (closed) |
| Tufts Associated Health Maintenance Organization, Inc. | Health Plan | 70,320 | Feb 16, 2018 | Unauthorized Access/Disclosure | Archive (closed) |
| Partners HealthCare System, Inc. | Healthcare Provider | 2,450 | Feb 5, 2018 | Hacking/IT Incident | Archive (closed) |
| Charles River Medical Associates, pc | Healthcare Provider | 9,387 | Jan 8, 2018 | Loss | Archive (closed) |
| Blue Cross Blue Shield of Massachusetts | Health Plan | 1,843 | Dec 26, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Alere Toxicology | Healthcare Provider | 2,146 | Nov 28, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Sports Medicine & Rehabilitation Therapy, Inc. | Healthcare Provider | 8,800 | Nov 14, 2017 | Hacking/IT Incident | Archive (closed) |
| The Lowell General Hospital | Healthcare Provider | 769 | Nov 10, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| Insulet Corporation | Healthcare Provider | 1,469 | Oct 17, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| John Hancock Life Insurance Company (U.S.A.) | Health Plan | 1,715 | Oct 6, 2017 | Hacking/IT Incident | Archive (closed) |
| Massachusetts Department of Public Health - Tewksbury Hospital | Healthcare Provider | 1,176 | Jul 21, 2017 | Unauthorized Access/Disclosure | Archive (closed) |
| 2020 On-Site Optometry | Business Associate | 15,400 | Feb 13, 2017 | Hacking/IT Incident | Archive (closed) |
| Berkshire Medical Center | Healthcare Provider | 1,745 | Nov 23, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.