Boston Health Care for Homeless Program Reports Data Exposure

Boston Health Care for the Homeless Program reported a data security incident to Oregon authorities, with the breach date identified as October 31, 2025. The filing occurred on September 3, 2026, and the investigation status is currently listed as monitoring.

The compromised data, according to the official filing, includes various highly sensitive categories. Specifically, the breach exposed individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates.

Exposure of such detailed personal and health information can carry significant risks. This data could potentially be used for medical identity theft, where unauthorized parties might attempt to obtain medical services or file fraudulent insurance claims. Additionally, Social Security Numbers and other identifiers could be exploited for broader identity theft or financial fraud.

Individuals who received a notification about this incident are advised to take proactive steps to protect themselves. It is recommended to review explanation of benefits (EOB) statements from health insurers carefully for any unfamiliar services and to regularly obtain and examine credit reports from the three major credit bureaus for suspicious activity. Remaining vigilant for any unsolicited communications that request personal details is also important.