US-MA — Unauthorized Access/Disclosure
Timeline
- November 2024Press coverage Press
press report (press_reported): a November 2024 cyberattack and data breach
source - January 31, 2025Reported to regulator Regulator
HHS OCR breach portal listing: Unauthorized Access/Disclosure; Network Server
source - May 30, 2025Press coverage Press
press report (individuals_notified): The company notified affected individuals about the data breach on May 30, 2025.
source - December 15, 2026Press coverage Press
press report (press_reported): The final fairness hearing has been scheduled for December 15, 2026.
source
What a Massachusetts notice means
Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.