Brown Health Medical Group-MA Data Breach Exposes PHI and PII

Brown Health Medical Group-MA, legally known as Lifespan Physicians Group of Massachusetts Inc., disclosed a data breach that exposed sensitive personal and health information. The health system was formerly known as Lifespan before rebranding to Brown University Health in 2024.

The breach affected 86 Vermont residents, according to the Vermont Attorney General on July 16, 2026.

The breach exposed several categories of sensitive data included Social Security numbers, financial account codes, credit and debit account information, government identification numbers and health records.

Brown Health Medical Group's response to the breach

Affected individuals should watch for direct communications from Brown Health Medical Group regarding this incident. At this time, detailed information about the company's investigation, consumer notification timeline or any protective services for affected individuals has not been released in publicly available filings.

Anyone who believes they may be affected can check the Brown Health website for information about the incident. This includes current or former patients of Brown Health Medical Group-MA or other providers within the Brown University Health network.