Magnolia Management Data Breach Exposes Medical Records and Financial Info

Magnolia Management Company LLC, a Massachusetts-based senior housing management company affiliated with The Gralia Group, disclosed a data breach that affected residents in multiple states.

On or about April 3, 2026, Magnolia Management became aware of unauthorized activity in one of its employee email accounts. Upon discovery, the company took steps to secure its email environment and launched an investigation to determine the scope of the incident.

The investigation confirmed that information contained within the affected email accounts may have been accessed by an unauthorized individual.

The company then undertook a comprehensive review of the impacted accounts to identify exactly what information was stored in them and to determine which individuals were affected. The review was completed on Aug. 10, 2026.

The types of data exposed included names, Social Security numbers, medical records, financial account information and driver's license numbers.

The incident has so far impacted 3,134 Massachusetts residents and 21 Rhode Island residents.

Magnolia Management began notifying consumers on Oct. 30, 2026, by written notice and disclosed the incident to the Massachusetts Office of Consumer Affairs and Business Regulation on Nov. 3, 2026.

Magnolia Management's response to the breach

Magnolia Management is offering affected individuals 24 months of complimentary credit monitoring and identity protection services through Experian IdentityWorks.

Affected individuals must enroll in the credit monitoring service by Feb. 26, 2027, using the activation code included in their written notification letter. Enrollment is available online at the Experian IdentityWorks website or by contacting Experian's customer care team by phone.

Magnolia Management has set up a dedicated phone line for questions about the breach. The line is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays. Affected individuals can also write to the company at 200 North Main St., Suite 204, East Longmeadow, MA 01028