Berkshire Health Systems, Inc.

Berkshire Health Systems, Inc. (MA) reported to HHS OCR on 2025-07-30 an Unauthorized Access/Disclosure breach affecting 1,421 individuals. Breached information was located in Electronic Medical Records. No business associate was involved. The breach type and location suggest internal unauthorized access or accidental disclosure of PHI from electronic medical records; no further detail was available in the web description.

Affected (this filing): 1,421

Berkshire Health Systems, Inc. (BHS) notified the NH Attorney General and HHS of an insider threat involving a rogue employee at Fairview Hospital. The employee, hired in 2014, allegedly accessed patient records in the EMR system without legitimate business purpose starting potentially as early as 2014. The incident involves PHI (names, DOB, diagnosis, visit notes) of approximately 500 individuals. The employee was terminated, and BHS is conducting a lookback from Oct 2022. No evidence of data exfiltration was found, but access was unauthorized. BHS has implemented enhanced auditing and staff re-education.

Affected (this filing): 500