MASS GENERAL BRIGHAM INCORPORATED

Wentworth Douglass-Hospital reported an inadvertent disclosure affecting 1 individual on 02/20/2026. The breach was discovered on 02/27/2026. Written notification was sent on 04/08/2026, and 24 months of credit monitoring via Experian was offered.

Mass General Brigham (via Wentworth-Douglass Hospital) notified NH AG that a workforce member inappropriately accessed a patient's medical record on April 26, 2023. The incident was discovered on September 8, 2025. Data included PHI, SSN, and PII. One NH resident was notified on October 8, 2025.

Mass General Brigham Incorporated reported to HHS on 2024-06-28 an Unauthorized Access/Disclosure affecting 655 individuals. Several employees impermissibly shared system credentials with an unauthorized individual to outsource job duties. PHI exposed included names, addresses, medical record numbers, dates of birth, email addresses, phone numbers, SSNs, health insurance and claims information, diagnoses, and other treatment information located in Electronic Medical Records and other systems. Employees were sanctioned and all staff were retrained.

State AG filing for Mass General Brigham Incorporated in New Hampshire. The attached PDF content is empty/blank, preventing extraction of breach details.

General Health System, Inc. (Louisiana) reported an external system breach (hacking) occurring between June 24 and June 29, 2022, discovered on October 13, 2022. The incident affected 20,167 individuals, including 1 Maine resident. Acquired data included names and Social Security Numbers. The entity provided 12 months of credit monitoring and identity theft restoration through Equifax.

Mass General Brigham Incorporated reported a data breach to the Montana Attorney General. The breach was reported on 2020-12-18. The breach occurred from 11/23/2020 to 11/24/2020. 2 Montana residents were affected.