DisclosureLens
HackingHealthcareHealthcareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Lifespan Physician Group of Massachusetts Inc d/b/a Brown Health Medical Group -MA

bd_7bb8d8937ce55023 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 16, 2025

Filed

Jul 16, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Lifespan Physician Group of Massachusetts (dba Brown Health Medical Group-MA) disclosed a data breach affecting a historic file server at its Hawthorn location in Dartmouth, MA. Unauthorized access occurred between Dec 15-16, 2025, discovered on Dec 16, 2025. The incident impacted patient demographic, health, and financial data. Notices were sent on July 16, 2026, offering two years of Experian IdentityWorks. Law enforcement was notified.

Incident timeline

undetected · 1 days

Dec 15, 2025

Begins

Dec 16, 2025

Discovered

Jul 16, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 4 states

View merged incident ↗
Massachusetts State AGJul 1 · first
Vermont State AG+15d
HHS OCR+15d
New Hampshire State AG+15d
Nebraska State AG+15d · this page

Pattern: first filing Jul 1 (MA), last Jul 16 (NE) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.