Boston Health Care for the Homeless Program data breach

Clerk's notes

On September 3, 2026, Boston Health Care for the Homeless Program formally reported a data security incident to Oregon authorities, confirming a breach that occurred on October 31, 2025. This incident is currently under monitoring, indicating an ongoing review of its scope and impact. The filing outlines a compromise of sensitive patient and personal data.

The reported exposure includes critical personal identifiers and health information. Specifically, the data types impacted were Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This highly sensitive information, if misused, can lead to various forms of identity theft, medical fraud, and other serious long-term consequences for affected individuals.

As a healthcare provider, Boston Health Care for the Homeless Program is entrusted with protecting patient data under strict regulations like HIPAA. A breach of this nature raises questions about the safeguards in place to prevent unauthorized access to such confidential records. The incident suggests a failure to meet the rigorous security protocols required for handling vulnerable populations' sensitive data.

Individuals who received a data breach notification letter from Boston Health Care for the Homeless Program should recognize this as formal notice that their information was compromised. This notification establishes a basis for affected persons to seek a legal review of their specific situation. Our firm offers a free, no-obligation case review to help understand your rights and options. No legal fees are owed unless compensation is recovered. This communication is attorney advertising and does not create an attorney-client relationship.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.