Heywood Healthcare Data Breach Exposes PHI and PII

Heywood Healthcare Inc., a nonprofit, community-owned healthcare system based in Gardner, Massachusetts, disclosed a data breach involving the exposure of sensitive personal and medical information.

Heywood Healthcare is an independent healthcare system that has served communities across north central Massachusetts and southern New Hampshire. The system includes Henry Heywood Memorial Hospital, Athol Memorial Hospital and Heywood Medical Group Inc.

The breach was reported to the Vermont Attorney General on Sept. 10, 2026, with 516 Vermont residents identified as affected.

The data breach involved the exposure of information held across the Heywood Healthcare system and its affiliated entities. The breach affected data connected to the organization's broader network of hospitals and physician practices that serve patients across the region.

The types of information exposed included Social Security numbers, government ID numbers and health records.

Heywood Healthcare's response to the breach

Individuals who may have been affected should watch carefully for a notification letter from Heywood Healthcare. Such a letter would be an important source of details about the incident, including information about what specific personal or medical data was involved, any protective services the company may be offering and instructions for how to enroll in those services.

Individuals with questions or concerns about the breach can visit the Heywood Healthcare website for any updates about the incident.