Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringOregon AG filing · September 3, 2026

Boston Health Care for Homeless Program Breach Exposes Patient Data

Boston Health Care for the Homeless Program in Oregon reported a data breach impacting patient privacy in September 2026. This incident exposed highly sensitive personal and medical information, creating significant risks for affected individuals. If you received a notification letter, it's important to understand your legal options.

This breach is real, not a scam. Boston Health Care for the Homeless Program officially reported it to the Oregon Attorney General on September 3, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Boston Health Care for the Homeless Program notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Oregon
Breach date
October 31, 2025
Reported
September 3, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates

Boston Health Care for the Homeless Program, a critical healthcare provider in Oregon, officially reported a data security incident to the state's Attorney General on September 3, 2026. The breach, which occurred on October 31, 2025, involved the compromise of deeply personal and clinical information maintained by the organization.

Investigations into the incident indicate that a substantial amount of sensitive patient data was exposed. The compromised information includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. Given the organization's mission to serve vulnerable populations, the exposure of such intimate details is particularly concerning.

The compromise of this data can lead to serious, long-term consequences for those affected. Individuals may face risks such as medical identity theft, where their information is used for fraudulent billing or to obtain unauthorized prescriptions. It also increases the potential for financial scams and other forms of identity fraud, which can severely impact credit and access to necessary healthcare services.

As a healthcare entity, Boston Health Care for the Homeless Program is obligated by regulations like HIPAA to safeguard patient information. These rules demand robust security measures to prevent unauthorized access. The occurrence of this breach suggests that these mandated protocols may not have been sufficient to protect sensitive patient data from cyber threats.

If you received a data breach notification letter from Boston Health Care for the Homeless Program, your information was directly involved in this security lapse. This notice formally recognizes that your confidential data was exposed. We are currently monitoring this breach and offering free case reviews to help affected individuals understand their rights and potential legal options for accountability.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Oregon Attorney General filing

Related data breach cases