THE Brown Health Medical Group-MA experienced a data breach affecting the personal, medical, and financial information of over 311,000 individuals. Unauthorized access to a legacy file server occurred between December 15-16, 2025, and was discovered on December 16, prompting an immediate investigation. The breach did not impact the electronic health record system. Compromised data may include personal details, employment records, medical information, and financial data.
The organization took steps to address the incident, including increased security measures and offering two years of free identity protection to affected individuals. The breach was reported to the U.S. Department of Health and Human Services (HHS) with no ransomware group claiming responsibility as of now.