MA · HHS OCR reports
HIPAA breaches in Massachusetts
HIPAA breaches affecting 500 or more individuals reported to HHS OCR by covered entities listed in Massachusetts.
Reports
245
Individuals affected
28,784,150
Under investigation
22
Top type: Hacking/IT Incident
State breach notification law
Mass. Gen. Laws ch. 93H, §§ 1-6 (General Laws Chapter 93H - Security Breaches) (amended 2019)
Timing: notify affected individuals 'as soon as practicable and without unreasonable delay' with no specific day
Read the Massachusetts data breach notification law summaryAll reports, newest first
Page 5 of 5. 245 reports.
| Covered entity | Entity type | Individuals | Submitted | Type of breach | Status |
|---|---|---|---|---|---|
| Baystate Health, Inc. | Healthcare Provider | 13,112 | Oct 21, 2016 | Hacking/IT Incident | Archive (closed) |
| Codman Square Health Center | Healthcare Provider | 3,840 | Sep 12, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Massachusetts General Hospital | Healthcare Provider | 4,293 | Jun 29, 2016 | Hacking/IT Incident | Archive (closed) |
| Northgate Medical PC | Business Associate | 2,500 | Mar 24, 2016 | Unauthorized Access/Disclosure | Archive (closed) |
| Brigham and Women's Hospital | Healthcare Provider | 1,009 | Jan 11, 2016 | Hacking/IT Incident | Archive (closed) |
| Lawrence General Hospital | Healthcare Provider | 2,071 | Aug 5, 2015 | Loss | Archive (closed) |
| Prima CARE, PC | Healthcare Provider | 1,651 | Jul 29, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| The McLean Hospital Corporation | Healthcare Provider | 12,673 | Jul 28, 2015 | Loss | Archive (closed) |
| Massachusetts General Hospital | Healthcare Provider | 648 | Jul 8, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Partners HealthCare System, Inc. | Healthcare Provider | 3,321 | May 1, 2015 | Hacking/IT Incident | Archive (closed) |
| Life Care Center of Attleboro | Healthcare Provider | 2,473 | Mar 20, 2015 | Loss | Archive (closed) |
| UMass Memorial Medical Group, Inc. | Healthcare Provider | 14,100 | Jan 30, 2015 | Unauthorized Access/Disclosure | Archive (closed) |
| Brigham and Women's Hospital | Healthcare Provider | 999 | Nov 17, 2014 | Theft | Archive (closed) |
| St. Elizabeth's Medical Center | Healthcare Provider | 595 | Aug 26, 2014 | Theft | Archive (closed) |
| Iron Mountain Incorporated | Business Associate | 10,000 | Aug 15, 2014 | Loss, Theft | Archive (closed) |
| UMass Memorial Medical Center | Healthcare Provider | 2,387 | May 5, 2014 | Unauthorized Access/Disclosure | Archive (closed) |
| Boston Medical Center | 15,265 | Apr 29, 2014 | Unauthorized Access/Disclosure | Archive (closed) | |
| Tufts Associated Health Maintenance Organization, Inc. and Tufts Insurance Company | Health Plan | 8,830 | Apr 24, 2014 | Theft | Archive (closed) |
| Jeff Spiegel | Healthcare Provider | 832 | Dec 23, 2013 | Unauthorized Access/Disclosure | Archive (closed) |
| UMASSAmherst | Healthcare Provider | 1,670 | Jun 5, 2013 | Hacking/IT Incident | Archive (closed) |
| HealthCare for Women, Inc. | Healthcare Provider | 8,727 | Mar 20, 2013 | Hacking/IT Incident | Archive (closed) |
| Goold Health System (Goold) | Business Associate | 6,332 | Mar 6, 2013 | Loss | Archive (closed) |
| Kindred Transitional Care and Rehabilitation - Marl | Healthcare Provider | 716 | Feb 14, 2013 | Theft | Archive (closed) |
| Clearpoint Design, Inc. | Business Associate | 7,250 | Jan 10, 2013 | Hacking/IT Incident | Archive (closed) |
| Clearpoint Design, Inc. | Business Associate | 4,100 | Jan 10, 2013 | Hacking/IT Incident | Archive (closed) |
| Clearpoint Design, Inc. | Business Associate | 4,125 | Jan 7, 2013 | Hacking/IT Incident | Archive (closed) |
| Clearpoint Design, Inc. | Business Associate | 4,343 | Dec 28, 2012 | Hacking/IT Incident | Archive (closed) |
| Brigham and Women's Hospital | Healthcare Provider | 615 | Nov 26, 2012 | Theft | Archive (closed) |
| Beth Israel Deaconess Medical Center | Healthcare Provider | 3,900 | Jul 20, 2012 | Theft | Archive (closed) |
| Children's Hospital Boston | Healthcare Provider | 2,159 | May 22, 2012 | Theft | Archive (closed) |
| St. Elizabeth's Medical Center | Healthcare Provider | 6,831 | Apr 6, 2012 | Loss | Archive (closed) |
| Sleep HealthCenters LLC | Healthcare Provider | 2,988 | Dec 28, 2011 | Theft | Archive (closed) |
| Spectrum Health Ssytems, Inc. | Healthcare Provider | 14,750 | Oct 20, 2011 | Theft | Archive (closed) |
| Lahey Clinic | Healthcare Provider | 599 | Oct 11, 2011 | Theft | Archive (closed) |
| Adult & Pediatric Dermatology, PC | Healthcare Provider | 2,200 | Oct 7, 2011 | Theft | Archive (closed) |
| Brigham and Women's Hospital and Faulkner Hospital | Healthcare Provider | 638 | Aug 3, 2011 | Theft | Archive (closed) |
| Beth Israel Deaconess Medical Center | Healthcare Provider | 2,021 | Jul 19, 2011 | Hacking/IT Incident | Archive (closed) |
| Drs Edalji and Komer | Healthcare Provider | 563 | May 6, 2011 | Theft | Archive (closed) |
| University Health Services, University of Massachusetts, Amherst | Healthcare Provider | 942 | Mar 7, 2011 | Unauthorized Access/Disclosure | Archive (closed) |
| Joseph A. Gagnon d/b/a Goldthwait Associates | Business Associate | 11,000 | Oct 1, 2010 | Improper Disposal | Archive (closed) |
| Pioneer Valley Pathology | Business Associate | 24,750 | Aug 25, 2010 | Theft | Archive (closed) |
| DentaQuest | Business Associate | 10,515 | Jun 9, 2010 | Theft | Archive (closed) |
| Massachusetts Eye and Ear Infirmary | Healthcare Provider | 3,594 | Apr 20, 2010 | Theft | Archive (closed) |
| Massachusetts Eye and Ear Infirmary | Healthcare Provider | 1,076 | Jan 8, 2010 | Theft | Archive (closed) |
| Daniel J. Sigman MD PC | Business Associate | 1,860 | Jan 7, 2010 | Theft | Archive (closed) |
Source: HHS OCR Breach Portal, OCR export October 2026.