A major cybersecurity incident has put sensitive personal, medical and financial records of hundreds of thousands of Americans at risk.
The U.S. Department of Health and Human Services Office for Civil Rights says the Lifespan Physician Group of Massachusetts, which is doing business as the Brown Health Medical Group, was hit by a hacking/IT incident, impacting 311,760 people.
Brown Medical Group says an unauthorized entity gained access to its systems and stole files that may contain names, dates of birth, contact numbers, payroll and credentialing records, medical data, Social Security numbers, driver’s license numbers, other government-issued identification numbers, credit or debit card numbers, and financial account records.
“We first became aware of a data security incident impacting a historic file server at the Practice on December 16, 2025. We immediately initiated an investigation and isolated the server. Through our investigation, we determined that the unauthorized access to the server occurred between December 15–16, 2025. This incident did not impact the Practice’s electronic health record system…
Due to the nature of the incident, we have been unable to conclusively determine exactly what information was impacted. However, on June 22, 2026, we determined the scope of personal information that may have been impacted by this incident, and we are providing this notice out of an abundance of caution.”
Brown Medical Group says it abruptly sent notification letters to affected individuals while offering two years of complimentary identity restoration and fraud detection services through Experian IdentityWorks.
Follow us on X, Facebook and Telegram
Don’t Miss a Beat – Subscribe to get email alerts delivered directly to your inbox
Generated Image: Midjourney
