DotHouse Health

DotHouse Health in Boston confirmed a data breach that compromised 185,795 Massachusetts residents' personal and medical information, including names, medical record numbers, diagnoses, medications, treatment info, claims info, dates of birth, and addresses. The breach occurred between October 31, 2022, and November 27, 2022. Ransomware gang ALPHV/BlackCat claimed responsibility, alleging it stole 800 GB of data. DotHouse has not verified the claim or disclosed if a ransom was paid. The company is offering free credit monitoring to eligible victims.

Source: https://www.comparitech.com/news/boston-clinic-notifies-185000-people-of-data-breach-that-compromised-patients-personal-and-medical-info/

TPRM report: https://scoringcyber.rankiteo.com/company/dothousehealth

"id": "dot712072025",
"linkid": "dothousehealth",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 185795,
                        'industry': 'Healthcare',
                        'location': 'Boston, Massachusetts',
                        'name': 'DotHouse Health',
                        'type': 'Medical Clinic'}],
 'attack_vector': 'Unknown',
 'customer_advisories': ['Free credit monitoring through CyEx'],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 185795,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['personal information',
                                              'medical information']},
 'date_detected': '2022-11-28',
 'date_publicly_disclosed': '2023-01-01',
 'description': 'DotHouse Health in Boston confirmed a data breach that '
                'compromised patients’ names, medical record numbers, '
                'diagnoses, conditions, medications, treatment info, claims '
                'info, dates of birth, and addresses.',
 'impact': {'data_compromised': ['names',
                                 'medical record numbers',
                                 'diagnoses',
                                 'conditions',
                                 'medications',
                                 'treatment info',
                                 'claims info',
                                 'dates of birth',
                                 'addresses'],
            'systems_affected': ['certain computer systems']},
 'initial_access_broker': {'reconnaissance_period': ['2022-10-31 to '
                                                     '2022-11-27']},
 'investigation_status': 'Ongoing',
 'motivation': 'Data Theft, Ransom',
 'ransomware': {'data_exfiltration': 'Yes',
                'ransomware_strain': 'ALPHV/BlackCat'},
 'references': [{'source': 'Comparitech'}],
 'regulatory_compliance': {'regulatory_notifications': ['US Department of '
                                                        'Health and Human '
                                                        'Services',
                                                        'Massachusetts Office '
                                                        'of Consumer Affairs '
                                                        'and Business '
                                                        'Regulation']},
 'response': {'communication_strategy': ['Credit monitoring for victims'],
              'third_party_assistance': ['CyEx']},
 'threat_actor': ['ALPHV/BlackCat'],
 'title': 'DotHouse Health Data Breach',
 'type': 'Data Breach'}