Filed in MN and MA — Hacking/IT Incident
The same incident was filed separately with 2 jurisdictions within a few days of each other (MN and MA) — shown here as one incident.
Timeline
- July 2025Press coverage Press
press report (press_reported): a July 2025 data incident that exposed patients’ personal and protected health information
source - July 9, 2025Press coverage Press
press report (press_reported): A cybercriminal gained access to an employee’s email account in a business email compromise attack
source - September 4, 2025
- September 4, 2025
- UndatedPress coverage Press
press report (press_reported): The data breach was reported to the HHS’ Office for Civil Rights
source
What a Massachusetts notice means
Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.