HackingData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTHEALTH_BASICMediumActive
Life Choice Hospice of Southern Massachusetts, LLC
bd_b9f8efaa95b79488 · schema v1 · pii pii-v1
Full breach record for Life Choice Hospice of Southern Massachusetts, LLC →Life Choice Hospice of Southern Massachusetts, LLC (dba Compassus – Southern Massachusetts) reported a third-party data event involving Doctor Alliance. Unauthorized access to documents on the Doctor Alliance portal occurred from November 4–17, 2025. Approximately 45 Massachusetts residents were affected, with data including names, Social Security numbers, and medical information. The victim entity notified HHS and state regulators, and provided consumer protection guidance to affected individuals.
Massachusetts clock✗ MA AG >90d29 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed45 affectedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1045-life-choice-hospice-of-southern-massachusetts-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- eba73679a839b6ad41812ed90864e3f9706e5b85a04731960179a217552520bd
Reporting entity
- Name
- Life Choice Hospice of Southern Massachusetts, LLCnorm: life choice hospice of southern massachusetts
Victim entity
- Name
- Life Choice Hospice of Southern Massachusetts, LLCnorm: life choice hospice of southern massachusetts
Incident
- Discovered
- Nov 13, 2025
- Materiality determined
- —
- Notification sent
- Jun 26, 2026
- Affected individuals
- 45
- Data types
- IDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Providing written notice of this incident to relevant state regulatorsNotifying the U.S. Department of Health and Human Services pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
- Third party
- via Doctor Alliance
- Initial access
- supply_chain
Compliance
- Time to disclose
- 29 weeks(200 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.