High Point Treatment Center Data Breach Exposes Social Security Numbers

Published
September 16, 2025
Updated
April 9, 2026
High Point Treatment Center Data Breach Exposes Social Security Numbers
High Point Treatment Center

On July 16, 2025, High Point Treatment Center, a Massachusetts-based hospital and health care provider, discovered a data breach affecting the personal information 25,832 individuals, including 4,359 Massachusetts residents, 15 New Hampshire residents, and four Maine residents.

The attack was first detected when High Point noticed unusual activity in its network on July 6, 2025.

The breach was the result of a ransomware attack carried out by the Abyss group, who claimed responsibility and posted about the incident on the dark web on July 26, 2025. According to Abyss, they obtained 1.8 terabytes of uncompressed data from High Point’s systems.

The breach exposed sensitive personally identifiable information (PII), including names, Social Security numbers and dates of birth. This information was collected as part of employment or prospective employment with High Point.

The breach was officially disclosed to the Maine Attorney General on July 29, 2025, to the Massachusetts Attorney General on July 29, 2025, and to the New Hampshire Attorney General on Aug. 5, 2025.

High Point Treatment Center’s response

High Point is offering 24 months of complimentary single-bureau credit monitoring, credit reports and credit score services through Cyberscout, a TransUnion company specializing in fraud assistance and remediation.

Individuals are encouraged to enroll in these services within 90 days of receiving their notification letter. The credit monitoring service provides alerts when changes occur to a person’s credit file, helping individuals detect any suspicious activity early.

High Point also recommends that those affected remain vigilant by regularly reviewing their account statements and credit reports for any unauthorized activity. They suggest placing a fraud alert or credit freeze on credit files if necessary and provide detailed instructions and contact information for the three major credit bureaus in the notification letter.

For further information or assistance, affected individuals can call the dedicated assistance line at 833-397-4692, Monday through Friday from 8 a.m. to 8 p.m. Eastern Time.

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Consumers Notification date
July 29, 2025
Date of Breach
Breach Discovered Date
July 16, 2025
Total People Affected
25832
Information Types Exposed
  • name
  • date of birth
  • health insurance identification number
  • health insurance group number
  • Social Security number
  • medical diagnosis information
  • medical treatment information
  • medical treatment location
  • doctor name
  • medical treatment dates

-

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image