Boston Area Rape Crisis Center

Boston Area Rape Crisis Center (BARCC) notified the Massachusetts Attorney General of an inadvertent disclosure of personal information caused by an employee's violation of data security policies. The incident involved the misdelivery of data to an unintended recipient. BARCC terminated the responsible employee and attempted to contact the recipient to mitigate the exposure. The organization is retraining employees on data security protocols. The breach likely involved PII including names, addresses, and potentially Social Security numbers, given the context of credit freeze instructions included in the notice.