Millstone Medical Outsourcing Data Breach Exposes SSNs and Health Records

Millstone Medical Outsourcing LLC, a private medical-device outsourcing company headquartered in Fall River, Massachusetts, disclosed a data breach involving sensitive personal and health information.

The breach was reported to the attorneys general offices of Massachusetts and Vermont. The company posted a notice of the data breach through USA Today Classifieds.

The breach began on Dec. 15, 2025, when an unauthorized party first gained access to the company's computer systems. The company detected the suspicious activity the following day.

An investigation into the incident found that between Dec. 15 and Dec. 19, certain company data was subject to unauthorized access and acquisition.

A comprehensive data review was subsequently carried out with the assistance of a third-party expert. The review confirmed that the affected files contained personal information belonging to certain individuals.

The types of information exposed included Social Security numbers, government identification numbers, financial account codes, credit and debit account information and health records.

So far, the incident impacted 1,094 residents of Massachusetts.

Millstone Medical Outsourcing's response to the breach

The company is providing affected individuals with access to 24 months of complimentary credit monitoring and identity protection services through TransUnion.

Affected individuals who received a notice from Millstone Medical Outsourcing should follow the instructions included in their letter to enroll in the complimentary credit monitoring and identity protection services.