Cambridge Health Alliance Suffers PHI Breach

by | Apr 3, 2018

Law enforcement agencies have notified Cambridge Health Alliance (CHA) that the protected health information of some of its subscibers has been obtained by an unauthorized individual.

Everett Massachusetts Police Department alerted, on January 31, 2018, CHA that data the incorporated the PHI of some of its patients had been identified in the possession of an hacker unauthorized to have the data in question. After being told of the breach, CHA carried out an internal investigation into the breach and reviewed the files.

One of the files, at least, contained data that referred to financial details which included patients’ names, addresses, birth dates, Social Security numbers, employer information, costs of healthcare services, and discharge details. The information in question referred to the 2013 billing period.

A breach notice sent to affected individuals by the law firm BakerHostetler on behalf of CHA stated that HIPAA breach targeted four people from New Hampshire, who have been offered credit monitoring and identity theft protection services through Experian free of charge.

While the breach notice submitted reveals that just four individuals were targeted, the Boston Globe has published that notification letters have been sent to an estimated 2,500 patients. The information regarding the breach are the same aside from the number of individuals targeted.

Boston Globe also revealed that CHA spokesman David Cecere confirmed that the investigation is ongoing it is still unclear how the information came to be obtained. Cecere revealed that it could have been a hack or the information could have been made public in error

In addition to the internal investigation completed, CHA has hired a computer forensics consultancy firm to aid the attempts to determine exactly how the data was made public.

Raise the level of HIPAA Awareness in your organization with Learner-Friendly, Comprehensive and Affordable HIPAA Training.


Please enable JavaScript in your browser to complete this form.

Patrick Kennedy

Patrick Kennedy is a highly accomplished journalist and editor with nearly two decades of experience in the field. With expertise in writing and editing content, Patrick has made significant contributions to various publications and organizations. Over the course of his career, Patrick has successfully managed teams of writers, overseeing the production of high-quality content and ensuring its adherence to professional standards. His exceptional leadership skills, combined with his deep understanding of journalistic principles, have allowed him to create cohesive and engaging narratives that resonate with readers. A notable area of specialization for Patrick lies in compliance, particularly in relation to HIPAA (Health Insurance Portability and Accountability Act). He has authored numerous articles delving into the complexities of compliance and its implications for various industries. Patrick's comprehensive understanding of HIPAA regulations has positioned him as a go-to expert, sought after for his insights and expertise in this field. Patrick's bachelors degree is from the University of Limerick and his master's degree in journalism is from Dublin City University. You can contact Patrick through his LinkedIn profile:

Raise the level of HIPAA Awareness in your organization with Learner-Friendly, Comprehensive and Affordable HIPAA Training.

Comprehensive HIPAA Training

Used in 1000+ Healthcare Organizations and 100+ Universities

    Full Course - Immediate Access

    Privacy Policy