Boston Healthcare for the Homeless Program
Disclosed Aug 7, 20267 weeks ago201,260 affectedConfirmed
What is known
| People affected | 201,260 (as reported to HHS) |
|---|---|
| Disclosed | Aug 7, 2026 |
| Discovered | Jun 8, 2026 |
| Happened | Oct 31, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health, Social Security numbers, Insurance, Government IDs, Payment cards, Financial |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Boston Healthcare for the Homeless Programoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report: Boston Healthcare for the Homeless Program (Healthcare Provider, MA)ocrportal.hhs.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005240: Boston Healthcare for the Homeless Programoag.my.site.com · Official notice | Official notice |
| Vermont Attorney General breach report: Boston Healthcare for the Homeless Programago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 7 | |
| Vermont AGresidents of VT | Aug 8 | 169 |
| HHS OCRtotal | Aug 10 | 201,260 |
| Texas AGresidents of TX | Aug 10 | 553 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/categories/security-breach-notices · backfill source
- 2026-09-25 · data_types: ["names","health","ssn","insurance"] to ["names","health","ssn","insurance","government-id","payment-card","financial"] · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","insurance"] · backfill source
- 2026-09-25 · discovered: empty to 2026-06-08 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 201260 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.