AccidentalHealthcareHealthcareMisdeliveryCustomer Data InvolvedHealth (basic)Identity (basic)Government IDHighContained

Entyre Care

bd_e8dc5d1a3cb66106 · schema v1 · pii pii-v1

Severity

High

Discovered

May 12, 2026

Filed

Jul 10, 2026

To disclose

8 weeks

Affected

1,677state residents only

Confidence

66%

Full breach record for Entyre Care →

Entyre Care Massachusetts Inc notified Massachusetts residents of a data breach where an employee inadvertently published files containing names, ages, and Medicaid IDs to a publicly accessible repository on March 2, 2026. The incident was discovered on May 12, 2026. No evidence of identity theft was found, but the company offered two years of free credit monitoring.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d8 weeks discovery → filing

Incident timeline

undetected · 71 days

discovery → filing · 8 weeks / 59 days

Mar 2, 2026

Begins

May 12, 2026

Discovered

Jul 10, 2026

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,677 affectedView incident

Name: Entyre Care
norm: entyre care
Domain: entyrecare.com

Name: Entyre Care
norm: entyre care
Domain: entyrecare.com
Industry: Healthcarellm

Discovered: May 12, 2026
Breach occurred: Mar 2, 2026
Undetected for: 71 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2026
Affected individuals: 1,677state-resident count only
Data types: Health (basic)Identity (basic)Government ID
Attack vector: Misconfiguration
MITRE ATT&CK: T1567 Misuse of Cloud or Web-Based Service
Threat actor: Internal

During the incident: Took down the repository
Worked with leading third-party cybersecurity experts to understand the nature, scope, and impact of the incident
Offered two years of free credit monitoring and identity theft protection services provided by IDX
Changes made: Offered two years of free credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1115-entyre-care-massachusetts-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2026
Raw hash: 3c4abdfe9d053ecae6dd4a9fe8b1fad8d7cbb9e69caa911f2940581c78dab0b1

Reporting entityEntyre Care

Victim entityEntyre Care

Incidentdiscovered May 12, 2026

Stated responseTook down the repository

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov