BNHC Data Breach Exposes PHI of 97,488 Patients

Brockton Neighborhood Health Center (BNHC), a Massachusetts-based medical practice, recently experienced a significant data breach that impacted the personal and medical information of 97,488 individuals.

The breach occurred between November 1, 2024, and November 3, 2024, when an unauthorized actor accessed and copied files from BNHC’s computer network. The breach was discovered on November 3, 2024, and an investigation confirmed the extent of the incident by November 18, 2024.

The affected files contained sensitive information for individuals who were treated at BNHC between 2017 and 2022.

The exposed data includes:

• Names
• Dates of birth
• Addresses
• Diagnoses/conditions
• Lab results
• Medications
• Medical record numbers
• Health insurance information
• Other treatment-related information

The breach was reported to the U.S. Department of Health and Human Services on December 13, 2024. Additional details about the incident can be found on the U.S. Department of Health and Human Services breach portal.

This breach underscores the severity of cyber threats targeting healthcare organizations, as it involves highly sensitive medical and personal data.

Brockton Neighborhood Health Center's response

In response to the data breach, BNHC took immediate action to secure its network and launched a thorough investigation into the incident. The organization reviewed the affected files to identify individuals whose information was potentially compromised. BNHC has also notified federal law enforcement and relevant regulatory bodies about the breach.

As part of its ongoing commitment to data security, BNHC is reviewing and updating its policies and procedures to prevent similar incidents in the future. The organization has also provided resources to help affected individuals protect their information from potential misuse.

For more details, BNHC has posted a notice about the breach on its website.

Affected by the Brockton Neighborhood Health Center data breach?

If you believe you may have been affected by this data breach, it is important to take proactive steps to protect your personal and financial information. Here’s what you can do:

1. Monitor your accounts: Regularly review your bank statements, credit card statements, and health insurance Explanation of Benefits (EOB) statements for any suspicious activity or unauthorized transactions.
2. Request your free credit reports: Under U.S. law, you are entitled to one free credit report annually from each of the three major credit reporting bureaus (Equifax, Experian, and TransUnion). You can request your reports at AnnualCreditReport.com.
3. Place a fraud alert: Consider placing a fraud alert on your credit file. This free service requires businesses to verify your identity before extending new credit. Contact one of the three major credit bureaus to initiate a fraud alert.
4. Consider a credit freeze: A credit freeze prevents credit bureaus from sharing your credit report without your authorization. This can help prevent identity thieves from opening new accounts in your name. You can contact Equifax, Experian, or TransUnion to request a credit freeze.
5. Report suspicious activity: If you notice any unauthorized transactions or suspect identity theft, report it immediately to your financial institution, healthcare provider, or insurance company. You can also file a report with the Federal Trade Commission (FTC) at IdentityTheft.gov.
6. Stay informed: For additional guidance and resources, visit the FTC’s website or contact your state attorney general’s office.

If you have further questions or need assistance, BNHC has set up a toll-free hotline at 1-833-799-4377, available Monday through Friday from 8 a.m. to 8 p.m. (excluding U.S. holidays). You can also write to BNHC at 63 Main Street, Brockton, MA 02301, ATTN: Compliance Officer.