Breachesby GlyphMassachusetts General Hospital
Disclosed Dec 14, 20189,900 affectedConfirmed
The covered entity (CE), Massachusetts General Hospital, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 9,900 individuals. The ePHI involved included names, marital status, sex, race/ethnicity, birthdates, clinical information, and treatment information. In its mitigation efforts, the CE implemented additional administrative and technical safeguards and retrained its staff. The CE notified HHS and affected individuals. During its investigation, OCR provided the CE with technical assistance regarding the HIPAA Rules.
What is known
| People affected | 9,900 (as reported to HHS) |
|---|---|
| Disclosed | Dec 14, 2018 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Massachusetts General Hospital
Breach, details not statedBreach notice filed with the Vermont AG, details not stated.HealthcareUSFeb 21, 2024Breach, details not statedExposed names, Social Security numbers and names. Reported to the Maine AG.HealthcareUSMar 21, 2017Hacking breachHacking exposed names and health records. Reported to the HHS archive.4,293 affectedHealthcareUSJun 29, 2016Insider breachInsider exposed names and health records. Reported to the HHS archive.648 affectedHealthcareUSAug 5, 2014
History of this record
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.