Lifespan Physician Group of Massachusetts, operating as Brown Health Medical Group-MA, officially disclosed the incident to the Vermont Attorney General’s Office on July 16, 2026. While the firm has confirmed that 290,357 residents in Massachusetts and 86 in Vermont were affected, the total national scope of the exposure remains undisclosed. The compromised data includes high-risk identifiers such as government-issued IDs, driver’s license numbers, and detailed health histories.

Edelson Lechtzin LLP is now evaluating potential class action litigation to seek compensation for victims, citing risks of financial and medical fraud. The firm suggests that affected individuals monitor their credit reports and explanation-of-benefit statements closely. Patients are encouraged to secure their credit files through freezes or fraud alerts and to enroll in any identity protection services offered by the medical group to mitigate the long-term impact of this exposure.