Heart of America Medical Center reported that it detected suspicious activity in its network on or about June 12, 2025. A forensic investigation determined on September 15, 2025, that files had been taken without authorization. The incident was attributed in the report to the EMBARGO ransomware group, which posted claims on a dark web portal on August 6, 2025, that 800 GB of data had been stolen. Heart of America Medical Center reported the breach to the Massachusetts Office of Consumer Affairs and Business Regulation on August 5, 2026.
The reported exposed information includes Social Security numbers and medical records. The number of affected individuals has not been publicly disclosed. The hospital completed its review of exposed data on June 9, 2026, and finalized a notification mailing list on July 9, 2026; the date consumer notices were sent has not been confirmed. Further details may emerge as reporting and notifications continue.