Healthcare Provider · Archived
Massachusetts General Hospital
648 individuals · submitted July 8, 2015
About this report
An employee of the covered entity (CE), Massachusetts General Hospital, sent an unencrypted e-mail to the incorrect e-mail address. The e-mail contained the protected health information (PHI of 648 individuals. The types of PHI involved in the breach included names, dates of birth, medical record number sand social security numbers. Following the breach, the CE sanctioned the employee in question and changed its policy to use a secure storage application instead of e-mail to send PHI. OCR obtained assurances that the CE implemented the corrective actions listed above.
Summary as published by the HHS Office for Civil Rights.
- Organization
- Massachusetts General Hospital
- State
- MA
- Entity type
- Healthcare Provider
- Individuals affected
- 648
- Submission date
- July 8, 2015
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Business associate present
- No
- OCR status
- Archived
More breach reports in MA
MA · Aug 10, 2026
Boston Healthcare for the Homeless Program
201,260 individuals
MA · Aug 7, 2026
Indico Data Solutions, Inc.
4,840 individuals
MA · Jul 21, 2026
Harvard Pilgrim Health Care, Inc.
1,168 individuals
MA · Jul 16, 2026
DentaQuest, LLC
15,000,000 individuals
MA · Jul 16, 2026
Lifespan Physician Group of Massachusetts, Inc. d/b/a Brown Health Medical Group-MA
311,760 individuals
MA · Jul 14, 2026
TELUS Health (US) LTD.
2,641 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals