Executive Office of Health and Human Services Data Breach Notice (Massachusetts Attorney General)

The Executive Office of Health and Human Services has notified 403 Massachusetts residents that their Social Security numbers and medical records were exposed in a data breach. The filing, reported to the Massachusetts Office of Consumer Affairs on July 16, 2026, lists these two categories as involved in the incident.

Your Social Security Number Cannot Be Replaced

If you received a notification letter, your Social Security number is now in the hands of an unknown party and cannot be changed. Unlike a credit card or password, a Social Security number is permanent. It stays with you for life, which is why it remains one of the most valuable pieces of information for identity thieves even years after a breach.

Medical records carry the same lifelong sensitivity. They contain highly personal details about your health history that cannot be reset or revoked. Once exposed, that information can be used for insurance fraud, prescription fraud, or to build a more convincing identity theft profile when combined with your Social Security number.

What This Exposure Enables

With both a Social Security number and medical records, someone can attempt to file fraudulent tax returns, open accounts in your name, or submit false medical claims. The combination makes it easier to impersonate you convincingly to insurers, government agencies, or financial institutions.