MASS GENERAL BRIGHAM INCORPORATED

Brigham and Women's Hospital notified a Massachusetts resident that their PHI was inadvertently mailed to an incorrect address on June 27, 2026, and viewed by the unintended recipient. The Privacy Office became aware of the incident on June 30, 2026. Affected data included name, DOB, address, SSN, diagnosis, and treatment information. The hospital investigated, implemented preventive measures, and offered 24 months of credit monitoring.

Wentworth Douglass-Hospital reported an inadvertent disclosure affecting 1 individual on 02/20/2026. The breach was discovered on 02/27/2026. Written notification was sent on 04/08/2026, and 24 months of credit monitoring via Experian was offered.

Massachusetts General Hospital notified a patient that on February 3, 2026, a workforce member inadvertently sent a document containing PHI (name, DOB, SSN, diagnosis) to the incorrect patient via Patient Gateway. The Privacy Office became aware on February 6, 2026. The hospital investigated, implemented preventive measures, and is offering 24 months of credit monitoring.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-11-06. 23 Massachusetts residents were affected.

Mass General Brigham (via Wentworth-Douglass Hospital) notified NH AG that a workforce member inappropriately accessed a patient's medical record on April 26, 2023. The incident was discovered on September 8, 2025. Data included PHI, SSN, and PII. One NH resident was notified on October 8, 2025.

Mass General Brigham Medical Group Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-25. 1 Massachusetts residents were affected.

Mass General Brigham Medical Group - reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-28. 1 Massachusetts residents were affected.

Mass General Brigham Incorporated reported to HHS on 2024-06-28 an Unauthorized Access/Disclosure affecting 655 individuals. Several employees impermissibly shared system credentials with an unauthorized individual to outsource job duties. PHI exposed included names, addresses, medical record numbers, dates of birth, email addresses, phone numbers, SSNs, health insurance and claims information, diagnoses, and other treatment information located in Electronic Medical Records and other systems. Employees were sanctioned and all staff were retrained.

Mass General Brigham Incorporated notified the NH AG of a data security incident discovered on April 4, 2024. Two employees allowed an unauthorized person to perform job duties and view patient information between Feb 26 and April 4, 2024. Affected data included PII and PHI. 46 NH residents were notified. Employees were terminated, and credit monitoring was offered.

Mass General Brigham Incorporated reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-28. 520 Massachusetts residents were affected.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-16. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-16. 1 Massachusetts residents were affected. The report records the breach type as paper.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-13. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-02-21. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-02-14. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-02-14. 1 Massachusetts residents were affected. The report records the breach type as paper.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-01-31. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-01-19. 1 Massachusetts residents were affected. The report records the breach type as electronic.

General Health System, Inc. (Louisiana) reported an external system breach (hacking) occurring between June 24 and June 29, 2022, discovered on October 13, 2022. The incident affected 20,167 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. The entity provided 12 months of credit monitoring and identity theft restoration through Equifax.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-10-28. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-10-03. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-09-14. 3 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-08-24. 5 Massachusetts residents were affected. The report records the breach type as paper.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-03-15. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Mass General Brigham reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-03-15. 1 Massachusetts residents were affected. The report records the breach type as electronic.