Breaches and incidents

Millstone Medical Outsourcing (Fall River, Massachusetts): December 2025 intrusion exposed SSNs and health records

Per HIPAA Journal, an unauthorized party accessed the medical device outsourcing firm’s network from 15 to 19 Dec 2025 and acquired files.

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Per HIPAA Journal, an unauthorized party accessed the medical device outsourcing firm’s network from 15 to 19 Dec 2025 and acquired files; on 15 Jul 2026 the review confirmed SSNs, government IDs, financial and card data and health records were included. Count not disclosed.
  • Root cause: not disclosed.
  • No attacker named.
  • 24 months of credit monitoring offered.