Brockton Area Multi Services
Disclosed May 16, 20242 years ago23,705 affectedConfirmed
The covered entity (CE), Brockton Area Multi Services reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 21,537 individuals. The PHI involved included names, Social Security numbers, addresses, drivers’ license and state identification numbers, dates of birth, diagnoses, and other treatment and health insurance information. The CE notified HHS, affected individuals, and the media. In response to the breach the CE implemented additional administrative and technical safeguards.
What is known
| People affected | 23,705 (as reported by the organization) |
|---|---|
| Disclosed | May 16, 2024 |
| Happened | Apr 13, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-05-16 Brockton Area Multi Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Brockton Area Multi Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Brockton Area Multi Services (Healthcare Provider, MA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | May 16, 2024 | |
| Indiana AGresidents of IN | May 16, 2024 | 1 |
| HHS archivetotal | May 16, 2024 | 21,537 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Brockton Area Multi Services reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 21,537 individuals. The PHI involved included names, Social Security numbers, · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 23705 · backfill source
- 2026-09-25 · occurred: empty to 2023-04-13 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.