Bay Cove Human Services Data Breach Details
On December 30, 2024, Bay Cove Human Services identified unusual activity within its network, prompting an immediate response to secure its systems and terminate the unauthorized access. The nonprofit organization, which provides mental health and addiction recovery services, engaged cybersecurity experts to investigate the breach and assess its impact.
According to Bay Cove, the investigation revealed that data may have been accessed or downloaded without authorization from certain internal systems. However, the organization was unable to determine exactly what data was compromised. As a precaution, Bay Cove is notifying all individuals whose information could have been involved. Formal notification letters were sent to potentially affected individuals on March 3, 2025.
A document from the Massachusetts Office of Consumer Affairs and Business Regulation confirms that the breach affected 17,691 state residents. Bay Cove is urging affected individuals to remain vigilant by monitoring their financial accounts and credit reports for any suspicious activity. Anyone who detects fraudulent activity should promptly notify their financial institution and report the incident to law enforcement, their state attorney general, or the Federal Trade Commission (FTC).
What Information Was Compromised?
The compromised data includes names, dates of birth, Social Security numbers, diagnosis or treatment information, and other health-related details. Additionally, some individuals may have had their driver’s license information exposed. Bay Cove emphasized that its electronic medical records system does not appear to have been impacted by the incident.
