MisusePrivilege AbuseEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Mass General Brigham Health Plan
bd_d33554cfd6b5ad33 · schema v1 · pii pii-v1
Full breach record for Mass General Brigham Health Plan →Mass General Brigham Health Plan notified consumers of an insider incident where an employee allowed an unauthorized person to access member data between July 2023 and April 2024. Data included names, SSNs, DOBs, and PHI. The employee was terminated, and 24 months of credit monitoring were offered.
Vermont clock✗ VT AG >45 bday12 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_085acbe4c33da181New Hampshire State AGfiled 2024-06-28Verified
- bd_711042fc3add84daHHS OCRfiled 2024-06-28Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-06-28-mass-general-brigham-health-plan-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 28, 2024
- Raw hash
- 619a89e6b06e517add098d7008da024e964f43c04fb21b9ed78af81f7244c78c
Reporting entity
- Name
- Mass General Brigham Health Plannorm: mass general brigham health plan
Victim entity
- Name
- Mass General Brigham Health Plannorm: mass general brigham health plan
Incident
- Discovered
- Apr 2, 2024
- Materiality determined
- —
- Notification sent
- Jun 28, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 12 weeks(87 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.