Back Claimdepot

Brown Health Medical Group-MA Data Breach Exposes PHI and PII

Claimdepot • July 17, 2026

Brown Health Medical Group-MA , legally known as Lifespan Physicians Group of Massachusetts Inc., disclosed a data breach that exposed sensitive personal and health information. The health system was formerly known as Lifespan before rebranding to Brown University Health in 2024.

The breach affected 86 Vermont residents , according to the Vermont Attorney General on July 16, 2026.

The breach exposed several categories of sensitive data included Social Security numbers, financial account codes, credit and debit account information, government identification numbers and health records.

Brown Health Medical Group's response to the breach

Affected individuals should watch for direct communications from Brown Health Medical Group regarding this incident. At this time, detailed information the company's investigation, consumer notification timeline or any protective services for affected individuals has not been released in publicly available filings.

Anyone who believes they may be affected can check the Brown Health website for information the incident. This includes current or former patients of Brown Health Medical Group-MA or other providers within the Brown University Health network.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Data Breach at Brown Health Medical Group Exposes Sensitive Information Brown Health Medical Group-MA, formerly Lifespan Physician Group of Massachusetts, reported a data breach affecting sensitive personal and health information. The breach, disclosed on July 16, 2026, impacted 86 Vermont residents and potentially exposed Social Security numbers, financial account codes, credit and debit information, government IDs, and health records. Although the total number of affected individuals is not fully disclosed, it is estimated that 290,357 Massachusetts residents may be involved. The Vermont Attorney General's Office confirmed the breach, and affected individuals are advised to monitor communications from the health group. Currently, no specific protective measures or detailed investigation results have been publicly shared by Brown Health. Individuals who believe they are affected are encouraged to check the Brown Health website for updates. 2 sources 49

Extracted Entities

Brown Health Medical Group-MA Data Breach Exposes PHI and PII

The full story

Extracted Entities

Attack Types (1)

Companies (2)

CWE Weaknesses (1)