Northeast Rehabilitation Hospital Network

Northeast Rehabilitation Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-03. 1 Massachusetts residents were affected.

Northeast Rehabilitation Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-01-06. 22,514 Massachusetts residents were affected.

Northeast Rehabilitation Hospital Network (NRHN) disclosed that an unauthorized individual accessed its computer network between May 13-22, 2024, viewing or copying personal information including names and government identifiers. NRHN notified law enforcement, implemented security measures, and offered 24 months of credit monitoring. The investigation concluded in November 2024, with notifications sent in January 2025.

Country : United States of America - Exfiltraded data : yes - Encrypted data : yes

Country : United States of America - Exfiltraded data : yes - Encrypted data : yes

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-12-15. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-06-22. 1 Massachusetts residents were affected. The report records the breach type as both.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-06-02. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-07. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Northeast Rehabilitation Hospital Network reported a breach involving 2 patients in New Hampshire. On August 25, 2020, an office staff member inadvertently sent appointment notifications to incorrect patients due to failure to verify names against envelopes. The exposed data included patient names, dates of birth, and internal organization IDs. The organization notified affected patients and the NH Attorney General on September 8, 2020, and implemented employee reminders regarding PHI verification.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-07-28. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-03-23. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-07-31. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-06-12. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-05-03. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-01-22. 2 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-09-14. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network disclosed a misdelivery of medical records to a patient on August 23, 2018. The patient received paperwork belonging to another patient with the same first name. The patient notified the hospital, which issued written notice to the affected individual on September 4, 2018, and notified the NH Attorney General. One individual was affected.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-11-28. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-01-25. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network notified the NH Attorney General of an insider incident where an employee accessed another employee's account 6 times, 5 of which were unauthorized. The access involved PHI including names, MRNs, and insurance info. Discovered Jan 17, 2017 via audit. Remediation included employee reminders and policy review.

Northeast Rehabilitation Hospital Network reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-11-03. 1 Massachusetts residents were affected. The report records the breach type as paper.

Northeast Rehabilitation Hospital Network notified the NH Attorney General of an insider breach where employees accessed a co-worker's PHI to view treatment schedules. Discovered Aug 1, 2016. Compromised data included SSN, DOB, diagnosis, and insurance info. No malicious intent found.

Northeast Rehabilitation Hospital Network mistakenly faxed a Prior Authorization Request Form containing PHI for a minor child to an incorrect fax number on May 17, 2016. The form included name, DOB, medical history, diagnosis codes, and treatment plans. The organization attempted to identify the recipient to ensure destruction but was unsuccessful. The parent was notified on June 6, 2016. Staff were counseled and additional education planned.