Social EngineeringPhishingData ExfiltratedPHIHEALTH_BASICIDENTITY_BASICLowContained
Jeffrey Lisiecki, MD, PLLC
bd_441670dfaa977680 · schema v1 · pii pii-v1
Full breach record for Jeffrey Lisiecki, MD, PLLC →Jeffrey Lisiecki, MD, PLLC disclosed a phishing incident affecting a single individual's PHI (name, DOB, medical records, photos) accessed between Nov 2024 and Jan 2026. The email account was secured, and HHS OCR was notified. No evidence of fraud was found.
Massachusetts clock✓ MA AG ≤30d12 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-834-jeffrey-lisiecki-md-pllc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 849b18dd65b5fdffe1488eb67a873195e948b781c4e383518994ef05a80cb81b
Reporting entity
- Name
- Jeffrey Lisiecki, MD, PLLCnorm: jeffrey lisiecki md
Victim entity
- Name
- Jeffrey Lisiecki, MD, PLLCnorm: jeffrey lisiecki md
Incident
- Discovered
- Apr 19, 2026
- Materiality determined
- —
- Notification sent
- May 21, 2026
- Affected individuals
- 1
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Reported the incident to the Department of Health and Human Services, Office for Civil Rights
- Initial access
- phishing_link
Compliance
- Time to disclose
- 12 days(12 days from discovery to filing)
- Compliance flags
- MA AG ≤30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.