Where does the Point32Health case file come from?

Every entry is taken from the breach report Point32Health lodged with the Massachusetts Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Point32Health Data Breach

This file collects the dated facts on record for the Point32Health incident. The state report is dated August 27, 2025.

Timeline

August 27, 2025Report filed in MassachusettsDate the notice was lodged with the Massachusetts Attorney General.

Case facts

Filing state: Massachusetts
Date reported: August 27, 2025
Receiving office: Massachusetts Attorney General

Case notes

Point32Health, a major health services organization operating in New England, has officially reported a data security incident to the Office of the Massachusetts Attorney General. The filing, dated August 27, 2025, indicates that an investigation into the nature and scope of the event is ongoing.

While the specific categories of data involved were not detailed in the public filing, the incident concerns personal information managed by Point32Health. The organization administers health insurance plans through its constituent companies, including Harvard Pilgrim Health Care and Tufts Health Plan, and routinely handles sensitive records.

As a prominent entity in the regional healthcare delivery system, Point32Health coordinates medical care and processes numerous insurance claims. This role necessitates the collection and storage of extensive personal information for its millions of members across Massachusetts and New England.

Individuals who receive a data breach notification from Point32Health should remain vigilant. It is generally advisable to closely monitor financial accounts and credit reports for any suspicious transactions or unauthorized activity.

Consider placing a fraud alert or security freeze on your credit files to help prevent unauthorized access to your information. Reviewing statements from your health insurance provider for services you did not receive is also a prudent step. Be cautious of unsolicited communications, especially those requesting personal information, as they could be phishing attempts related to the incident.

Questions about this case file

Where does the Point32Health case file come from?: Every entry is taken from the breach report Point32Health lodged with the Massachusetts Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Massachusetts data breaches

Named in the Point32Health breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Massachusetts case files