DisclosureLens
AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedHealth (basic)Identity (basic)Government IDPHIMediumResolved

THE BRIGHAM AND WOMEN'S HOSPITAL, INC.

bd_328c1a7e66d02bbb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 30, 2026

Filed

Aug 6, 2026

To disclose

5 weeks

Affected

1state residents only

Confidence

65%
Full breach record for THE BRIGHAM AND WOMEN'S HOSPITAL, INC. →74 incidents on file

Brigham and Women's Hospital notified a Massachusetts resident that their PHI was inadvertently mailed to an incorrect address on June 27, 2026, and viewed by the unintended recipient. The Privacy Office became aware of the incident on June 30, 2026. Affected data included name, DOB, address, SSN, diagnosis, and treatment information. The hospital investigated, implemented preventive measures, and offered 24 months of credit monitoring.

Massachusetts clock⏱ MA AG >30d5 weeks discovery → filing

Incident timeline

undetected · 3 days
discovery → filing · 5 weeks / 37 days

Jun 27, 2026

Begins

Jun 30, 2026

Discovered

Aug 6, 2026

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.