Mass General Brigham Health Plan

The Vermont Office of the Attorney General reported on June 28, 2024, a data breach incident involving Mass General Brigham Health Plan (MGBHP) that may have allowed unauthorized access to members' personal information between July 31, 2023, and April 2, 2024. The exposed information potentially included names, addresses, medical record numbers, dates of birth, email addresses, phone numbers, health insurance policy numbers, and Social Security numbers.

Source: https://ago.vermont.gov/document/2024-06-28-mass-general-brigham-health-plan-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/mass-general-brigham

"id": "mas548072825",
"linkid": "mass-general-brigham",
"type": "Breach",
"date": "7/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Mass General Brigham Health Plan',
                        'type': 'Healthcare'}],
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'medical record numbers',
                                              'dates of birth',
                                              'email addresses',
                                              'phone numbers',
                                              'health insurance policy numbers',
                                              'Social Security numbers']},
 'date_detected': '2024-06-28',
 'date_publicly_disclosed': '2024-06-28',
 'description': 'The Vermont Office of the Attorney General reported on June '
                '28, 2024, a data breach incident involving Mass General '
                'Brigham Health Plan (MGBHP) that may have allowed '
                "unauthorized access to members' personal information between "
                'July 31, 2023, and April 2, 2024. The exposed information '
                'potentially included names, addresses, medical record '
                'numbers, dates of birth, email addresses, phone numbers, '
                'health insurance policy numbers, and Social Security numbers.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'medical record numbers',
                                 'dates of birth',
                                 'email addresses',
                                 'phone numbers',
                                 'health insurance policy numbers',
                                 'Social Security numbers']},
 'references': [{'date_accessed': '2024-06-28',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at Mass General Brigham Health Plan',
 'type': 'Data Breach'}