UMass Memorial Health Care, Inc.

ent_fe8a009938ff524cd5b45483

Compliance scorecard →View in feed →

Disclosures

State AG · HHS OCR · 4 jurisdictions

Multi-filing incidents

incidents joining 2+ filings here

Max affected reported

209,048

nationwide · HHS OCR MA

Leak-site claims

none in sample

Identity resolution

Canonical name: UMass Memorial Health Care, Inc.
Normalized: umass memorial health care— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (13)newest first

Massachusetts State AGas victim2022-03-02
UMass Memorial Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-03-02. 4 Massachusetts residents were affected. The report records the breach type as electronic.
MASSACHUSETTSHHS OCRas victim2022-02-28
UMass Memorial Health Care (MA) reported to HHS on 2022-02-28 a Hacking/IT Incident (email phishing) affecting 4,270 individuals. Several employees were targeted by a phishing scheme compromising PHI including names, SSNs, dates of birth, addresses, driver's license numbers, diagnoses, lab results, and health insurance information. Breached information was located in Email. The CE notified HHS, individuals, and media, offered credit monitoring, and implemented additional safeguards and staff retraining.
Illinois State AGas victim2022-01-01
UMASS MEMORIAL HEALTH filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-171). The register records the breach as discovered on June 6, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
Maine State AGas victim2021-10-15
UMass Memorial Health reported a phishing incident that occurred between June 24, 2020, and January 7, 2021. The breach was discovered on August 25, 2021. The incident compromised names and financial account numbers or credit/debit card numbers with their access codes. In response, the company offered one year of credit monitoring and identity theft protection services through Experian to the 3 affected Maine residents.
Massachusetts State AGas victim2021-10-15
Umass Memorial Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-10-15. 2,967 Massachusetts residents were affected. The report records the breach type as electronic.
MASSACHUSETTSHHS OCRas victim2021-10-15
UMass Memorial Health Care, Inc. reported to HHS on 2021-10-15 a Hacking/IT Incident affecting 209,048 individuals. Breached information located on Email. An employee was the subject of an email phishing scheme affecting PHI including names, dates of birth, and Social Security numbers.
New Hampshire State AGas victim2021-10-15
UMass Memorial Health notified the New Hampshire Attorney General of a phishing incident affecting employee email accounts. Unauthorized access occurred between June 24, 2020, and January 7, 2021. On August 25, 2021, the organization identified 17 New Hampshire residents whose PII (SSN, driver's license, financial account info) was contained in compromised emails. Total individuals notified under HIPAA was 1,370. Notifications began October 15, 2021, offering one year of credit monitoring.
Illinois State AGas victim2021-01-01
UMASS MEMORIAL HEALTH filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-422). The register records the breach as discovered on June 24, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
Massachusetts State AGas victim2019-03-12
Umass Memorial Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-03-12. 1 Massachusetts residents were affected. The report records the breach type as paper.
Massachusetts State AGas victim2019-01-17
Umass Memorial Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-01-17. 2 Massachusetts residents were affected. The report records the breach type as paper.
Massachusetts State AGas victim2018-07-16
Umass Memorial Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-07-16. 1 Massachusetts residents were affected. The report records the breach type as electronic.
Massachusetts State AGas victim2016-03-08
Umass Memorial Health Care reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-03-08. 16 Massachusetts residents were affected. The report records the breach type as paper.
Massachusetts State AGas victim2011-04-11
UMass Memorial Health Care Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2011-04-11. 5,265 Massachusetts residents were affected. The report records the breach type as electronic.