Massachusetts General Hospital
bd_487649c39d94d97e · schema v1 · pii pii-v1
Full breach record for Massachusetts General Hospital →88 incidents on fileMassachusetts General Hospital notified a patient that a workforce member inadvertently sent an email containing the patient's Protected Health Information (PHI) and personal information to an incorrect address on May 28, 2026. The Privacy Office learned of the incident on June 23, 2026. The exposed data included the child's name, date of birth, address, phone number, school, medical condition, and Social Security number, as well as the parent's name and contact information. MGH is providing 24 months of complimentary credit monitoring through Experian IdentityWorks and has implemented additional training and safeguards to prevent recurrence.
J jump to incidentP pin to compareR raw source
Incident timeline
May 28, 2026
Begins
Jun 23, 2026
Discovered
Aug 10, 2026
Filed
vs. sector median
2 wks faster
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.