High Point Data Breach: 1.8TB of Sensitive Data Stolen

Published
September 16, 2025
Updated
September 16, 2025
High Point Data Breach: 1.8TB of Sensitive Data Stolen
High Point Treatment Center
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

High Point Treatment Center

data breach?

Join the Lawsuit

It's free to join. 

Banner advertisement for ExpressVPN to take control of your online security

Claim Depot may receieve a commission from links on this page

High Point & Affiliated Organizations, a major hospital and healthcare provider in Massachusetts has experienced a cyberattack. On July 26, 2025, the organization was listed as the victim of a ransomware attack by a group known as the Abyss. The ransomware group claimed responsibility for the breach, claiming they had hacked 1.8 terabytes of uncompressed data from the provider's internal systems.

This incident is significant due to the high volume of data and the sensitive nature of the information handled by High Point. The Abyss group, known for targeting healthcare and critical infrastructure, published the breach on the dark web Tor network, a common platform for cybercriminals to leak or sell stolen data.

The total number impacted individuals has not been released, but could include thousands of patients and employees. This type of cybersecurity incident often exposes both personally identifiable information (PII) and protected health information (PHI).

Compromised information may have included names, contact information, dates of birth, Social Security numbers, health insurance information, medical records, and payment information. Impacted individuals are at risk for identity theft and medical fraud.

High Point & Affiliated Organizations' response

High Point & Affiliated Organizations will work to identify impacted individuals and employees. The company will also be required to make specific federal and state disclosures.

If you believe your personal information may have been compromised in this breach:

  • Carefully review any notice or communication you receive from High Point & Affiliated Organizations or your medical provider.
  • Monitor financial accounts and credit reports for signs of identity theft.
  • Consider placing fraud alerts or credit freezes with the major credit bureaus.
  • Be cautious of unsolicited emails or phone calls requesting personal information.

For more information about the organization and its services, visit the High Point & Affiliated Organizations website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image