Bay Cove Human Services
Disclosed Mar 3, 20251 year ago24,791 affectedConfirmed
The covered entity (CE), Bay Cove Human Services, reported that it was the subject of a data breach that affected the protected health information (PHI) of 21,295 individuals. The PHI involved included names, addresses, dates of birth, social security numbers, diagnoses, conditions, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE implemented new technical safeguards.
What is known
| People affected | 24,791 (as reported by the organization) |
|---|---|
| Disclosed | Mar 3, 2025 |
| Happened | Dec 29, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-03-03 Bay Cove Human Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Bay Cove Human Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Bay Cove Human Services (Healthcare Provider, MA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Mar 3, 2025 | |
| Indiana AGresidents of IN | Mar 3, 2025 | 4 |
| HHS archivetotal | Mar 3, 2025 | 21,295 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Bay Cove Human Services, reported that it was the subject of a data breach that affected the protected health information (PHI) of 21,295 individuals. The PHI involved included names, addresses, dates of birth, soci · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 24791 · backfill source
- 2026-09-25 · occurred: empty to 2024-12-29 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.