DotHouse Health Data Breach Investigation

Recently, DotHouse reported to the Attorney General of the Commonwealth of Massachusetts that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its care may have been compromised. According to the sample breach notice, on November 28, 2022, DotHouse because aware of suspicious activity in certain systems.¹ As a result, DotHouse launched an investigation to determine the nature of the incident.

Through its investigation, DotHouse confirmed that an unauthorized third party accessed or acquired sensitive personal information in its systems between October 31 and November 27, 2022.¹ The DotHouse electronic medical records database was not among the impacted systems.¹ As a result, DotHouse began a review of the data to determine what information had been impacted, as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Date of birth
• Address
• Medical information (such as medical record number, diagnosis/conditions, medications, and other treatment information)
• Claims information

As a result of the data breach, DotHouse began providing notice to impacted individuals. Based on the notice sent to Massachusetts residents, DotHouse is providing affected individuals with complimentary credit monitoring services. A link to the breach report filed by the Attorney General of the Commonwealth of Massachusetts is below.