Southcoast Health disclosed that February 16, 2026 activity involved a single compromised user mailbox at the Southeastern Massachusetts nonprofit system; access was halted immediately but individuals were offered credit monitoring because names and Social Security numbers might have been exposed.
OCR-sized denominators had not surfaced in indexed reporting as of HIPAA Journal's clustered write-up referencing the incident among other notices.
Canonical record: Southcoast Health 2026 mailbox incident on BreachHistory.
Source: HIPAA Journal