AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Brown Health Legacy Server Breach
Coverage from PR Newswire, SecurityWeek, and others
Brown Health Medical Group-MA, operated by Lifespan Physicians Group and affiliated with Brown University Health, disclosed unauthorized access to a legacy file server in Massachusetts on December 15–16, 2025.
The incident potentially affected at least 290,443 people in Massachusetts and Vermont, while later disclosures identified a broader total of 311,760 individuals and exposed records that may include health, Social Security, government identification, financial, employment, and professional information. Brown Health said its electronic health record system was not compromised and has added safeguards, employee training, notifications, and identity protection services.
The estimated breach population expanded from 290,443 to 311,760 individuals, while Brown Health clarified that its main electronic health record system was not compromised. The organization also moved from disclosure to concrete remediation, including added controls, employee training, and identity-protection services.