norm: lifespan physicians group of massachusettsUSno LEI · no CIKMax severity: High

Canonical registry

Lifespan Physicians Group of Massachusetts, Inc.

ent_97ed376ec5298a555a7b6dcb

Compliance scorecard →View in feed →

Disclosures

State AG · HHS OCR · 5 jurisdictions

Multi-filing incidents

incidents joining 2+ filings here

Max affected reported

311,760

nationwide · HHS OCR MA

Leak-site claims

none in sample

Identity resolution

Canonical name: Lifespan Physicians Group of Massachusetts, Inc.
Normalized: lifespan physicians group of massachusetts— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (6)newest first

Vermont State AGas victim2026-07-16
Lifespan Physicians Group of Massachusetts, Inc., d/b/a/ Brown Health Medical Group-MA reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-07-16. The reporting organization type is Health Care. 86 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit and Debit Account Info, Government ID Numbers, Health Records.
Nebraska State AGas reporting2026-07-16
Lifespan Physician Group of Massachusetts (dba Brown Health Medical Group-MA) disclosed a data breach affecting a historic file server at its Hawthorn location in Dartmouth, MA. Unauthorized access occurred between Dec 15-16, 2025, discovered on Dec 16, 2025. The incident impacted patient demographic, health, and financial data. Notices were sent on July 16, 2026, offering two years of Experian IdentityWorks. Law enforcement was notified.
MASSACHUSETTSHHS OCRas reporting2026-07-16
Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA reported to HHS on 2026-07-16 a Hacking/IT Incident affecting 311760 individuals. Breached information located on Network Server.
New Hampshire State AGas reporting2026-07-16
Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA notified the NH Attorney General of a data security incident at its Hawthorn location. Unauthorized access to a historic file server occurred between December 15-16, 2025, and was discovered on December 16, 2025. The incident potentially impacted the personal information of 1,129 New Hampshire residents. The Practice isolated the server, reset passwords, decommissioned the server, retrained employees, and offered two years of identity restoration services. Law enforcement was notified.
Illinois State AGas reporting2026-07-01
LIFESPAN PHYSICIAN GROUP OF MASSACHUSETTS, INC. D/B/A BROWN HEALTH MEDICAL GROUP-MA filed a data-breach notice with the Illinois Attorney General in July 2026 (case 26-07-1319). The register records the breach as discovered on June 22, 2026. Personal information types reported: drivers license, financial account number, medical information, passport number, ssn, username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
Massachusetts State AGas reporting2026-07-01
Lifespan Physician Group (dba Brown Health Medical Group-MA) disclosed a data breach affecting a historic file server at its Hawthorn location. Unauthorized access occurred between Dec 15-16, 2025, discovered on Dec 16, 2025. The EHR system was not impacted. Potentially affected data includes demographic info, SSNs, driver's licenses, financial account numbers, and medical/HR records. Notices were sent July 16, 2026, offering two years of Experian IdentityWorks. Law enforcement was notified.