Filed in FL and MA — Hacking/IT Incident
The same incident was filed separately with 2 jurisdictions within a few days of each other (FL and MA) — shown here as one incident.
Reported with a business associate involved (HHS portal)
Timeline
- July 9, 2025Press coverage Press
press report (press_reported): a criminal hacker gained access to two of its computer servers between July 9, 2025, and July 10, 2025
source - October 17, 2025Press coverage Press
press report (individuals_notified): The affected individuals were notified on or around October 17, 2025
source - October 17, 2025Reported to regulator Regulator
HHS OCR breach portal listing: Hacking/IT Incident; Network Server
source - October 17, 2025Reported to regulator Regulator
MA AG breach notification: 737 Massachusetts residents affected
source - April 2, 2026Press coverage Press
press report (acknowledged): after a full day of mediation on April 2, 2026, the material terms of a settlement were agreed upon by all parties
source
Litigation
- Possible litigation — multiple candidate dockets found, not yet resolved to a single case.
What a Massachusetts notice means
Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.