Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group -MA
bd_e3709429c223e475 · schema v1 · pii pii-v1
Lifespan Physician Group (dba Brown Health Medical Group-MA) disclosed a data breach affecting a historic file server at its Hawthorn location. Unauthorized access occurred between Dec 15-16, 2025, discovered on Dec 16, 2025. The EHR system was not impacted. Potentially affected data includes demographic info, SSNs, driver's licenses, financial account numbers, and medical/HR records. Notices were sent July 16, 2026, offering two years of Experian IdentityWorks. Law enforcement was notified.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 15, 2025
Begins
Dec 16, 2025
Discovered
Jul 1, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Vermont State AGbd_7b882f0a87e3fe6c2026-07-16 · +15dVerified
- Nebraska State AGbd_7bb8d8937ce550232026-07-16 · +15dVerified
- HHS OCRbd_97d3270d99e2ab3d2026-07-16 · +15dVerified
- New Hampshire State AGbd_9e4e1d4bb239d06f2026-07-16 · +15dVerified
Filing propagation · 5 filings · 4 states
View merged incident ↗Pattern: first filing Jul 1 (MA), last Jul 16 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.