MisusePrivilege AbuseEmployee Data InvolvedDelayed DiscoveryPHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENTMediumResolved
Wentworth-Douglass Hospital
bd_be4cb3b4d8618a18 · schema v1 · pii pii-v1
Full breach record for Wentworth-Douglass Hospital →Mass General Brigham (via Wentworth-Douglass Hospital) notified NH AG that a workforce member inappropriately accessed a patient's medical record on April 26, 2023. The incident was discovered on September 8, 2025. Data included PHI, SSN, and PII. One NH resident was notified on October 8, 2025.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mass-general-brigham-20251023.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2025
- Raw hash
- c7b25ea2a0b5be3908deabb0c2667555c7d8d0ecd979a824610fa1e2c313ba72
Reporting entity
- Name
- MASS GENERAL BRIGHAM INCORPORATEDnorm: mass general brigham
- Domain
- massgeneralbrigham.org
Victim entity
- Name
- Wentworth-Douglass Hospitalnorm: wentworth douglass hospital
Incident
- Discovered
- Sep 8, 2025
- Materiality determined
- —
- Notification sent
- Oct 8, 2025
- Affected individuals
- 1
- Data types
- PHIHEALTH_BASICIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.