DotHouse Health Data Breach Lawsuit Investigation

Were you one of the 185,795 patients notified that DotHouse Health suffered a cyber-attack? Critical personal and medical information may already be in the wrong hands—act now to protect your identity and learn whether you can pursue compensation.

What Happened?

DotHouse Health, a Joint Commission–accredited community health center in Boston’s Dorchester neighborhood, discovered that an unauthorized actor accessed its network between October 31, 2022 and November 27, 2022. After months of forensic investigation, the provider confirmed on July 14, 2025 that sensitive files were viewed or exfiltrated.

Information Exposed

• Full names and addresses
• Social Security numbers
• Dates of birth
• Government-issued IDs
• Medical record numbers
• Diagnosis, conditions, medications & treatment details
• Health insurance claims data
• Payment or financial information

Who Is Affected?

The breach notice filed with Massachusetts and Vermont regulators lists at least 185,795 impacted patients. Anyone who received a mailed notification letter—or whose dependent received one—should assume their data was compromised.

Your Rights & Next Steps

Under federal and state laws, healthcare organizations must safeguard protected health information (PHI). When they fail, victims may be entitled to remedies such as credit monitoring, identity restoration, and monetary damages.

Immediate Actions to Take

• Enroll in free credit monitoring: DotHouse Health is providing CyEx Identity Defense Complete for 12 months. Sign-up instructions are included in the mailed notice.
• Check your credit reports: Look for new accounts or hard inquiries you don’t recognize.
• Place a fraud alert or credit freeze: This makes it harder for scammers to open credit in your name.
• Watch for phishing attempts: Never click suspicious links or provide personal details to callers.

Potential Compensation

If negligence contributed to this incident, affected individuals could recover:

• Reimbursement for out-of-pocket expenses (credit fees, mailing costs, etc.)
• Payment for lost time spent securing accounts
• Compensation for emotional distress or risk of identity theft

Frequently Asked Questions

Is the DotHouse Health data breach real?

Yes. DotHouse Health filed official notices with the Massachusetts and Vermont Attorneys General and posted an updated notice on its website.

What should I do if I got a DotHouse Health breach letter?

Follow the enrollment instructions for free credit monitoring, keep the letter for your records, and consider speaking with a data-breach attorney about your rights.

Was my Social Security number exposed in the DotHouse Health hack?

For many patients, Social Security numbers and other highly sensitive data were compromised. Review the breach notice or call DotHouse’s assistance line at 855-659-0053 to confirm.

How long do I have to file a DotHouse Health data breach claim?

Statutes of limitation vary by state, but acting quickly preserves evidence and strengthens your case. Contact a qualified lawyer as soon as possible.

Does DotHouse Health offer credit monitoring for this breach?

Yes. All affected individuals can enroll in CyEx Identity Defense Complete at no cost for 12 months.

Need Help? Explore Your Legal Options

Time is critical after a health-care data breach. If you experienced fraud or simply want to hold DotHouse Health accountable, you may be able to join a class-action lawsuit seeking financial relief and stronger data-security measures.

Protect yourself now—don’t wait until identity theft happens.

Attorney Advertising. Prior results do not guarantee a similar outcome.