Mass General Brigham Health Plan

Mass General Brigham Health Plan reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-10-30. 1 Massachusetts residents were affected.

Mass General Brigham Health Plan, Inc. notified the NH AG of a data security incident discovered April 2, 2024. An employee allowed an unauthorized person to perform job duties and view member personal information between July 31, 2023, and April 2, 2024. The incident involved PHI and PII of 62 NH residents. The employee was terminated, safeguards enhanced, and credit monitoring offered.

Mass General Brigham Health Plan reported to HHS on 2024-06-28 a Unauthorized Access/Disclosure affecting 3,659 individuals. Breached information located on Other. An employee impermissibly shared system credentials with an unauthorized individual, exposing PHI including names, addresses, SSNs, and medical data. The CE provided credit monitoring, established a call center, sanctioned the employee, and retrained staff.

Mass General Brigham Health Plan Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-28. 3,497 Massachusetts residents were affected.

Mass General Brigham Health Plan notified consumers of an insider incident where an employee allowed an unauthorized person to access member data between July 2023 and April 2024. Data included names, SSNs, DOBs, and PHI. The employee was terminated, and 24 months of credit monitoring were offered.

Welltok, Inc. notified Mass General Brigham Health Plan (MGBHP) that an unknown actor exploited vulnerabilities in the MOVEit Transfer server on May 30, 2023, exfiltrating data including names, DOBs, SSNs, and PHI. The incident was detected on July 26, 2023. Notices were sent on November 20, 2023. Credit monitoring was offered.