On December 8, 2023, Bradford Health Services discovered a data breach that impacted the sensitive information of individuals associated with their services. The breach was later disclosed to the Massachusetts and Vermont Attorney Generals' office on May 30, 2025, with at least 42 affected people in Massachusetts.
The compromised data included personally identifiable information (PII) and protected health information (PHI): names, driver’s license numbers, dates of birth, medical information (including diagnosis and treatment information, physician names, and medical record numbers), health insurance information, financial account numbers, passport numbers, payment card numbers plus a means of access to the account, and Social Security numbers.
The exposure of such comprehensive data including both financial and medical information makes this incident particularly severe. The inclusion of payment card numbers, Social Security numbers, and detailed medical records means that affected individuals could be at risk for identity theft, financial fraud, and medical identity theft.
The breach was officially reported in accordance with state regulations, and full details can be found in the Massachusetts Attorney General or Vermont Attorney General disclosures as well as the notice posted on Bradford Health Services’ website.
After discovering the breach, Bradford Health Services took steps to investigate the incident and determine the scope of the data compromised.
If you believe you may have been affected by this breach, it is important to remain vigilant. Consider taking the following steps:
Bradford Health Services may provide additional resources or support for those affected, so it is recommended to review the official notice and reach out to the company directly if you have concerns.
For more information about their services, visit the Bradford Health Services website.