Boston Healthcare for the Homeless Program Data Breach Notice (Massachusetts Attorney General)

The filing from Boston Healthcare for the Homeless Program means that Social Security numbers, driver's license numbers, and medical records belonging to 184,914 people are now outside the organisation's control. If you received a letter from them, this exposure includes at least some of those categories for you personally.

Social Security Numbers Cannot Be Replaced

A Social Security number is permanent. Unlike a credit card or password, it cannot be cancelled and reissued at will. Once it leaves an organisation's systems, it remains a lifelong key that can be used to open accounts, file fraudulent tax returns, claim government benefits, or build synthetic identities. The Massachusetts filing lists Social Security numbers among the exposed data for this incident reported on August 08, 2026.

Driver's license numbers add another durable identifier. When paired with a name and date of birth — information often present in medical files — they make it easier for someone to impersonate you at the DMV, open utility accounts, or obtain official documents in your name.

Medical Records Bring Lifelong Privacy Risks

Medical records do not expire. The filing confirms they were part of the exposed information. These records can reveal diagnoses, treatments, mental health history, substance use details, and other highly personal information that follows a person for decades. In the wrong hands, they can be used for insurance fraud, employment discrimination, blackmail, or simply to embarrass or harm someone who has sought care through Boston Healthcare for the Homeless Program.