Boston Medical Center Data Breach Details
On March 9, 2025, BMC’s Information Technology team detected unusual activity linked to certain user accounts. After a thorough investigation, it was confirmed that unauthorized access had occurred, potentially exposing sensitive personal data. The breach was identified in BMC’s Workday account system, which is used by employees for work-related functions.
In an effort to mitigate the impact of the breach, BMC has also partnered with IDX, a leader in identity protection services. Affected individuals are being offered 24 months of complimentary credit monitoring, CyberScan monitoring, and identity theft recovery services. IDX will also provide a $1,000,000 insurance policy to help with any potential losses stemming from identity theft.
What Information Was Involved?
The compromised information may include personal data within Workday accounts, such as:
-
Name, address, and Social Security number.
-
Bank account and routing information.
-
Additional information stored in the Workday system, such as employee credentials and other sensitive details.