Massachusetts General Hospital
ent_fdfd7a3b52b6835792ff1436
Disclosures
25+
State AG · 3 jurisdictions
Multi-filing incidents
6
incidents joining 2+ filings here
Max affected reported
12
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Massachusetts General Hospital
- Normalized
- massachusetts general hospital— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- massgeneral.org
Disclosure history (newest 25)newest first
- Massachusetts State AGas victim2026-08-10
Massachusetts General Hospital notified a patient that a workforce member inadvertently sent an email containing the patient's Protected Health Information (PHI) and personal information to an incorrect address on May 28, 2026. The Privacy Office learned of the incident on June 23, 2026. The exposed data included the child's name, date of birth, address, phone number, school, medical condition, and Social Security number, as well as the parent's name and contact information. MGH is providing 24 months of complimentary credit monitoring through Experian IdentityWorks and has implemented additional training and safeguards to prevent recurrence.
- Massachusetts State AGas victim2026-03-02
Massachusetts General Hospital notified a patient that on February 3, 2026, a workforce member inadvertently sent a document containing PHI (name, DOB, SSN, diagnosis) to the incorrect patient via Patient Gateway. The Privacy Office became aware on February 6, 2026. The hospital investigated, implemented preventive measures, and is offering 24 months of credit monitoring.
- Massachusetts State AGas victim2025-12-18
Mass General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-12-18. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-08-07
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-07. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-08-07
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-07. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-02-28
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-28. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2025-02-28
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-28. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2024-06-07
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-06-07. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2024-05-31
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-05-31. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2024-05-31
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-05-31. 1 Massachusetts residents were affected.
- Massachusetts State AGas victim2024-03-29
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-29. 1 Massachusetts residents were affected.
- Vermont State AGas victim2024-02-21
Massachusetts General Hospital filed a data breach notice with the Vermont Attorney General on February 21, 2024. The notice advises consumers to review account statements and update personal information. The specific nature of the breach, data types compromised, and number of affected individuals are not detailed in the filing page itself, though the attached PDF is a consumer notice regarding protected health information.
- Massachusetts State AGas victim2023-12-15
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-15. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2023-12-08
Massachusetts General Hospital notified the NH AG of a misdelivery incident on Nov 2, 2023, where a consent form containing PHI, PII, and financial info was sent to the wrong patient via Engaged MD. One NH resident affected. Notices sent Nov 28, 2023. Account deactivated; training improved.
- Massachusetts State AGas victim2023-10-13
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-10-13. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2023-08-25
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-25. 2 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2023-08-18
Mass General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-08-18. 12 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2023-07-17
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-17. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2023-05-12
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-05-12. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2023-04-17
Massachusetts General Hospital notified the NH AG of a data security incident involving one NH resident. A clinical research associate shared patient information via email on Sept 6-7, 2022. The incident was discovered on March 5, 2023. The hospital offered 24 months of credit monitoring.
- Massachusetts State AGas victim2023-03-31
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-31. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2023-03-09
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-09. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2023-03-09
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-03-09. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- Massachusetts State AGas victim2023-01-11
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-01-11. 1 Massachusetts residents were affected. The report records the breach type as paper.
- Massachusetts State AGas victim2022-12-15
Massachusetts General Hospital reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-12-15. 1 Massachusetts residents were affected. The report records the breach type as electronic.