HSS Services Data Breach Lawsuit Investigation

HSS Services notified the Massachusetts Attorney General of a data breach that exposed sensitive personal and medical information for 100 individuals. If you received a breach letter dated October 9, 2025, you may be eligible to take legal action and secure identity-protection services—start by reviewing the facts below.

Key Details at a Glance

• Breach type: Improper disposal of physical medical records
• Records exposed: 100
• Data involved: Names, Social Security numbers, medical information
• Breach window: March 3–4, 2025
• Discovery date: March 5, 2025
• Consumer notices mailed: October 9, 2025
• Regulator filing: Massachusetts Attorney General on October 17, 2025

What Happened

Flood damage at an HSS Services office in February 2025 led the company to hire a contractor to dispose of debris at an HSS warehouse. While clearing the warehouse on March 3, 2025, the contractor mistakenly removed boxes containing medical records and placed them in an unsecured dumpster located at a municipal complex in Hackensack, New Jersey. Surveillance footage shows a municipal employee inspecting the dumpster on March 4, 2025, followed by police involvement and retrieval of the records, which were then moved to a secure location.

HSS became aware of the incident on March 5, 2025, and began investigating. After reviewing the affected files, HSS confirmed on August 26, 2025, that protected health information belonging to 100 individuals was involved.

Information Involved

According to HSS Services, the compromised physical files contained:

• Name
• Social Security number
• Medical information (protected health information)

HSS Services’ Response

The company reported the event to law enforcement, secured the recovered records, and notified affected individuals. HSS states it “does not believe there is any risk” of misuse but issued the notice “out of an abundance of caution.”

What You Can Do

The breach letter advises recipients to:

• Remain vigilant by reviewing bank, credit, and health-insurance statements
• Check free annual credit reports for unfamiliar activity
• Promptly report suspicious charges to healthcare providers, insurers, or financial institutions

Timeline of Events

• February 2025 – Flood damages HSS office; debris moved to warehouse
• March 3, 2025 – Medical records mistakenly discarded
• March 4, 2025 – Police secure dumpster and recover records
• March 5, 2025 – HSS alerted and launches investigation
• August 26, 2025 – Review confirms PHI was present
• October 9, 2025 – Letters sent to affected individuals
• October 17, 2025 – Breach reported to Massachusetts AG

Legal Options for Affected Individuals

Even physical-file breaches can result in privacy violations. Data-breach laws allow impacted consumers to pursue monetary relief and enhanced credit monitoring. Preserve your notice letter and any out-of-pocket expenses, then consult a qualified attorney to determine eligibility.

Company Overview

HSS Services provides medical billing and related services to healthcare providers.

• Website: hssbilling.com
• Headquarters: 605 Broad Avenue, Suite 106, Ridgefield, New Jersey, United States
• Industry: Medical Billing
• Employee count: 118

Frequently Asked Questions

How many people were impacted by the HSS Services data breach?

HSS Services reported that 100 individuals were affected.

What personal data was exposed in the HSS Services breach?

The compromised records contained names, Social Security numbers, and medical information.

When did HSS Services discover the breach?

The company became aware of the incident on March 5, 2025.

Has HSS Services offered identity-protection services?

The notice letter encourages vigilance but does not specify a complimentary monitoring service.

Can I file a lawsuit over the HSS Services data breach?

Yes. If your information was involved, you may have legal claims for damages and enhanced protection. Contact a data-breach attorney to discuss next steps.