Boston Health Care for the Homeless Program Reports Massive Data Breach Affecting Over 185,000 Individuals
Boston Health Care for the Homeless Program (BHCHP), a nonprofit healthcare provider based in Boston, disclosed a significant data breach impacting 184,914 Massachusetts residents, along with 553 Texas residents and 169 Vermont residents. The incident was first detected on November 11, 2025, when the organization identified a network disruption.
An investigation, conducted with external cybersecurity experts, revealed that an unauthorized party may have accessed or exfiltrated sensitive files. A comprehensive review, completed on June 8, 2026, determined that exposed data included names, Social Security numbers, financial account details, government IDs, health records, medical information, and health insurance data.
BHCHP reported the breach to the California Attorney General and began notifying affected individuals via U.S. mail on August 7, 2026. As part of its response, the organization is offering 12 months of free credit monitoring through Cyberscout (a TransUnion company), along with fraud assistance for victims. Affected individuals can enroll using a unique code provided in their notification letter, with a 90-day deadline for activation. A dedicated call center (1-866-898-9670) is available for support.
The breach underscores the growing vulnerability of healthcare organizations to cyber threats, particularly those handling highly sensitive personal and medical data.
Source: https://www.claimdepot.com/data-breach/boston-healthcare-for-the-homeless-program-2026
Boston Health Care for the Homeless Program cybersecurity rating report: https://www.rankiteo.com/company/boston-health-care-for-the-homeless-program
"id": "BOS1786584181",
"linkid": "boston-health-care-for-the-homeless-program",
"type": "Breach",
"date": "11/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '185,636',
'industry': 'Healthcare',
'location': 'Boston, Massachusetts, USA',
'name': 'Boston Health Care for the Homeless Program '
'(BHCHP)',
'type': 'Nonprofit Healthcare Provider'}],
'customer_advisories': 'Notification letters sent to affected individuals '
'with credit monitoring enrollment details',
'data_breach': {'data_exfiltration': 'Possible',
'number_of_records_exposed': '185,636',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Financial account details',
'Government IDs',
'Health records',
'Medical information',
'Health insurance data']},
'date_detected': '2025-11-11',
'date_publicly_disclosed': '2026-08-07',
'description': 'Boston Health Care for the Homeless Program (BHCHP) disclosed '
'a significant data breach impacting 184,914 Massachusetts '
'residents, along with 553 Texas residents and 169 Vermont '
'residents. The breach involved unauthorized access or '
'exfiltration of sensitive files, including names, Social '
'Security numbers, financial account details, government IDs, '
'health records, medical information, and health insurance '
'data.',
'impact': {'brand_reputation_impact': 'Likely significant',
'data_compromised': 'Sensitive personal and medical data',
'identity_theft_risk': 'High',
'operational_impact': 'Network disruption',
'payment_information_risk': 'High'},
'investigation_status': 'Completed',
'references': [{'source': 'California Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Attorney '
'General']},
'response': {'communication_strategy': 'Notification via U.S. mail, dedicated '
'call center',
'remediation_measures': 'Credit monitoring and fraud assistance '
'for affected individuals',
'third_party_assistance': 'External cybersecurity experts'},
'title': 'Boston Health Care for the Homeless Program Data Breach',
'type': 'Data Breach'}