Lifespan Physician Group of Massachusetts, doing business as Brown Health Medical Group-MA, is notifying over 311,000 individuals that their personal, medical, and financial information was stolen in a data breach.
The incident occurred in December 2025 at its Hawthorn location. It involved a historic file server, the healthcare organization says in a sample notification letter filed with the Massachusetts Office of Consumer Affairs and Business Regulation.
While the practice’s electronic health record system was not affected, Brown Health Medical Group-MA determined on June 22, 2026, that the attackers accessed files containing personal information.
The potentially compromised information, it says, includes names, contact information, dates of birth, Social Security numbers, driver’s license numbers, government ID numbers, medical and disability-related records, financial account information, and credit/debit card numbers.
Personnel and human resources records, including payroll and compensation information, and licensure or credentialing information, were also compromised.
“Not all categories of information were impacted for all individuals,” Brown Health Medical Group-MA says.
The healthcare organization says it isolated the affected server immediately after identifying the incident, has implemented additional safeguards, and is re-training its employees.
Brown Health Medical Group-MA notified the US Department of Health and Human Services (HHS) that 311,760 people were affected by the data breach. Of these, 290,357 are Massachusetts residents.
The organization is providing the impacted individuals with two years of free fraud detection and identity protection and restoration services.
Brown Health Medical Group-MA has not named the threat actor behind the attack, and SecurityWeek has not seen any known ransomware or extortion groups claiming responsibility for the incident.
Related: 150,000 Impacted by Madera Community Hospital Data Breach
Related: Cyberattack Hits Liechtenstein’s Register of People Behind Companies and Foundations
Related: River Bank Says Hackers Deleted Data Stolen in Ransomware Attack
Related: Brinks Home Discloses Data Breach as Hackers Leak Files
