Breachesby GlyphBrigham and Women's Hospital
Disclosed Aug 4, 2023987 affectedConfirmed
The covered entity (CE), Brigham and Women’s Hospital, reported that graphs posted to the Internet contained a link that could expose the protected health information (PHI) of 987 individuals. The PHI involved included names, birthdates, addresses, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were retrained to better protect PHI.
What is known
| People affected | 987 (as reported to HHS) |
|---|---|
| Disclosed | Aug 4, 2023 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Brigham and Women's Hospital
Insider breachInsider exposed names and health records. Reported to the HHS archive.882 affectedHealthcareUSDec 8, 2020Hacking breachHacking exposed names and health records. Reported to the HHS archive.1,009 affectedHealthcareUSJan 11, 2016Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.999 affectedHealthcareUSNov 17, 2014Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.615 affectedHealthcareUSNov 26, 2012
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.