Brigham and Women's Hospital Data Breach Lawsuit Investigation
Brigham and Women’s Hospital confirmed that an email error on June 25, 2025 exposed one patient’s sensitive personal information. If you received the August 22, 2025 notice, you may be entitled to free identity-protection services and possible financial compensation.
What Happened?
According to a filing with the Massachusetts Attorney General’s Office, on June 25, 2025 an email containing a form completed by a patient was accidentally sent to several incorrect recipients. Brigham and Women’s Hospital (often referred to as “BWH”) discovered the mistake the same day and later notified the sole affected individual.
What Information Was Exposed?
The email attachment contained the following data elements:
- Name
- Date of birth
- Social Security number
- Address
- Phone number
- Email address
- Information related to the program application submitted
Brigham and Women’s Hospital’s Response
BWH reported the incident to state regulators and offered the impacted patient 24 months of free credit monitoring and identity-theft protection through Experian IdentityWorks℠. The hospital stated it has strengthened safeguards, promoted workforce education, and taken “appropriate steps” to prevent similar incidents.
Download Official Breach Notice (PDF)
Your Next Steps
Even a single exposed record can lead to identity theft. Brigham and Women’s Hospital recommends:
- Enrolling in the complimentary Experian IdentityWorks℠ services.
- Placing a free security freeze or one-year fraud alert with Equifax, Experian, and TransUnion as described in the notice.
- Reviewing medical, insurance, bank, and credit-card statements for unfamiliar activity.
- Checking your credit reports at AnnualCreditReport.com.
- Reporting suspicious activity to law enforcement or the Federal Trade Commission at ftc.gov/idtheft.
Timeline of Key Events
- June 25, 2025 — Email with patient form sent to wrong recipients; incident discovered.
- August 22, 2025 — Consumer notice mailed.
- November 6, 2025 — Incident reported to Massachusetts Attorney General.
- November 7, 2025 — Public disclosure updated.
Company Overview
Brigham and Women's Hospital is a Boston-based teaching hospital of Harvard Medical School and a founding member of the Mass General Brigham healthcare system.
- Website: brighamandwomens.org
- Headquarters: 75 Francis Street, Boston, Massachusetts, USA
- Industry: Healthcare
- Year founded: 1980
- Employees: Approximately 20,000
- Parent entity: Mass General Brigham
- Social Media: X | Facebook | Instagram | LinkedIn | YouTube
Frequently Asked Questions
I received a data breach letter from Brigham and Women’s Hospital — what should I do?
Follow the activation instructions for the complimentary Experian IdentityWorks services, review your credit reports, and consider placing a security freeze or fraud alert.
How do I submit a claim related to the Brigham and Women’s Hospital data breach?
Complete the claim-evaluation form on this page or click “Check Your Eligibility” above. Our team will review whether you qualify for compensation.
Am I eligible to join a lawsuit against Brigham and Women’s Hospital?
You may qualify if you were the patient whose data was exposed. Eligibility depends on factors such as documented fraud or time spent addressing the breach. Request a free case review to learn more.
What information did the Brigham and Women’s Hospital breach expose?
The email contained the patient’s name, date of birth, Social Security number, address, phone number, email address, and program-application details.
Did Brigham and Women’s Hospital offer credit monitoring, and for how long?
Yes. The hospital is offering 24 months of free credit monitoring and related identity-protection services through Experian IdentityWorks℠.
How many people were affected by the Brigham and Women’s Hospital breach?
The hospital reported the exposure of information belonging to one individual.
How can I get the official breach notice PDF for Brigham and Women’s Hospital?
You can download it directly from the Massachusetts Attorney General’s website using the “Download Official Breach Notice (PDF)” button above.