Skip to main content
health care professional health care professional

Bay Cove Human Services Data Breach Investigation

The data privacy lawyers at The Lyon Firm are investigating reports of a data breach impacting Boston, Massachusetts’ Bay Cove Human Services. The data security incident has been reported to the Attorney General of Massachusetts and indicates more than 17,000 individuals may have had their personal information leaked. Contact our attorneys to learn more about class action data breach lawsuits and how to protect yourself following a data theft.

What Happened at Bay Cove Human Services?

Bay Cove Human Services, Inc. recently reported a data breach to the Massachusetts Attorney General’s office on March 4, 2025. The incident is thought to have impacted 17,691 people in Massachusetts alone.

Based on an internal review of the potentially impacted personal data, Bay Cove has noted on their website that the following personal information may have been compromised: names, dates of birth, Social Security numbers, diagnosis or treatment details, and other health information.

More details on the breach are expected in the coming weeks, and as of writing, the exact details of how the data was allegedly stolen have not been disclosed. It is important, however, to begin to protect yourself if you have been notified by the organization. To learn more about certain measures to take following a data theft event, read our blog here.

Bay Cove assists Southeastern Massachusetts residents with mental illness, developmental disabilities, and substance use disorders. According to a notice provided, they discovered unusual network activity on December 30, 2024 and began an investigation with third-party experts. On March 3, 2025, data breach notification letters were supposedly mailed to all potentially affected individuals with available mailing addresses.

Our data breach lawyers have filed class action privacy complaints on behalf of plaintiffs in all fifty states. We believe any entity that collects and stores your details has a duty to protect it with robust IT security. Taking legal action can compensate victims and hold any negligent organization accountable for related damages.