Health Plan · Archived
Commonwealth Care Alliance
634 individuals · submitted February 25, 2026
About this report
The covered entity (CE), Commonwealth Care Alliance, reported that an employee mailed the protected health information (PHI) of 634 individuals to the wrong recipients. The PHI involved clinical information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, and implemented additional administrative, technical, and security safeguards to better protect its PHI.
Summary as published by the HHS Office for Civil Rights.
- Organization
- Commonwealth Care Alliance
- State
- MA
- Entity type
- Health Plan
- Individuals affected
- 634
- Submission date
- February 25, 2026
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Paper/Films
- Business associate present
- No
- OCR status
- Archived
More breach reports in MA
MA · Aug 10, 2026
Boston Healthcare for the Homeless Program
201,260 individuals
MA · Aug 7, 2026
Indico Data Solutions, Inc.
4,840 individuals
MA · Jul 21, 2026
Harvard Pilgrim Health Care, Inc.
1,168 individuals
MA · Jul 16, 2026
DentaQuest, LLC
15,000,000 individuals
MA · Jul 16, 2026
Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA
311,760 individuals
MA · Jul 14, 2026
TELUS Health (US) LTD.
2,641 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals