Incident

Mystic Valley Elder Services reports data breach


Learn More

Mystic Valley Elder Services (MVES) reports a data breach after an unauthorized party had its computer network. Mystic Valley Elder Services is a nonprofit organization in Massachusetts that provides a range of home and community-based services to older adults, adults with disabilities, and caregivers, supporting independent living across 11 cities and towns in the Mystic Valley region​

The breach, first detected on April 5, 2024. After detecting the breach, MVES contained it, informed law enforcement, and initiated an investigation with the assistance of external cybersecurity experts.

The investigation confirmed that confidential data had been accessed on April 5, 2024. The exposed personal information includes:

  • Names
  • Dates of birth
  • Passport numbers
  • Financial account numbers
  • Payment card numbers
  • Online credentials
  • Social Security numbers
  • Driver’s license numbers
  • Health insurance information
  • Medical information

The organization has not disclosed the cause of the breach, and the number of affected individuals.

Update - as of 1st of November 2024, media reports that the Mystic Valley Elder Services cyberattack compromised the information of nearly 87,000 individuals.

Notification letters were sent to the impacted individuals on October 22, 2024, detailing the specific information that was compromised.

Mystic Valley Elder Services reports data breach