Brown Health Medical Group-MA

Brown Health Medical Group-MA, also known as Lifespan Physician Group of Massachusetts, is a physician organization headquartered in the United States.
The group provides medical services to patients, operating as a physician group within the healthcare sector.
Its clinical activities are supported by administrative systems that manage patient records, billing, and regulatory compliance.
As a medical group, its core function is the delivery of physician‑based care to the communities it serves.
The organization serves a patient population that generates substantial clinical and operational data.

In December 2025, the group reported a security incident in which the historic file server at its Hawthorn location was compromised, exposing personal, medical, and financial data of 311,760 individuals.
The breach notification to the Department of Health and Human Services specified that 290,357 of those affected were Massachusetts residents.
The exposed information included names, contact details, dates of birth, Social Security numbers, driver’s license numbers, government IDs, medical and disability records, financial account information, credit/debit card numbers, and personnel records such as payroll and licensure details.
After isolating the affected server and implementing additional safeguards, the organization began offering two years of free fraud detection and identity protection services to those impacted.
This response highlights the group’s responsibility to mitigate harm following a data security event.
The incident underscores the scale of the organization’s patient and employee data holdings, reflecting a substantial footprint in the region it serves.