Compassus – Southern Massachusetts Data Breach Lawsuit Investigation

Active investigation · Free, confidential case review
Call (954) 799-5914
Data Breaches / Compassus - Southern Massachusetts
Active investigation Data breach · Healthcare Notices mailed Jun 26, 2026

Received a June 2026 breach notice from Compassus - Southern Massachusetts?

Dapeer Law, P.A. is investigating a potential class action against Life Choice Hospice of Southern Massachusetts, LLC, doing business as Compassus - Southern Massachusetts, a Massachusetts hospice care provider, on behalf of patients whose personal information may have been exposed through a third-party vendor incident disclosed in June 2026.

Submit your claim See what to do No fee unless we recover for you
Breach window
Nov 4 to 17, 2025
Unauthorized portal access (Doctor Alliance)
Notification delay
~7 months
Discovered Nov 2025, notices Jun 2026
Credit monitoring
No monitoring
None offered; 45 affected in Massachusetts
Eligibility

Who may qualify

You may be eligible to participate in a class action if any of the following applies:

  • You received a data breach notification letter from Compassus - Southern Massachusetts dated June 2026.
  • You received a notice letter, mailed on or around June 26, 2026, informing you that your information was involved in the Doctor Alliance vendor incident.
  • You were a patient of Compassus - Southern Massachusetts (Life Choice Hospice of Southern Massachusetts) whose personal or medical information was held by, or shared with, its documentation and billing vendor, Doctor Alliance.
  • No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
  • Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.

Not sure if you qualify?

Send us your notice, we'll confirm your eligibility at no cost.

Check eligibility
Background

What happened

Life Choice Hospice of Southern Massachusetts, LLC, which does business as Compassus - Southern Massachusetts, has reported that one of its third-party vendors, Doctor Alliance, experienced unauthorized access to documents available through its online portal between November 4 and November 17, 2025. According to the company, Doctor Alliance detected the suspicious activity on November 13, 2025. The incident was reported to the Massachusetts Attorney General.

Doctor Alliance did not notify Compassus - Southern Massachusetts of the incident until February 12, 2026, and continued providing details about affected patients through April 8, 2026. Compassus then completed its validation of the data and mailed notice letters to affected individuals on or around June 26, 2026. The company reported that 45 individuals, all Massachusetts residents, were affected. The roughly seven-month gap between discovery and consumer notification is one factor being evaluated.

The notice indicates that names, Social Security numbers, and medical information may have been involved. For a hospice care provider, this type of information can carry heightened risk, because medical and Social Security data can be used for medical identity theft and financial fraud. The company's notice does not state that complimentary credit monitoring is being offered, and instead directs individuals to self-service protections such as fraud alerts and credit freezes.

Third-Party Vendor Breach Social Security Numbers Medical Information Massachusetts Attorney General Hospice Care
Action plan

What to do if you received a letter

1

Keep your notice letter

Do not discard it. Your notice letter documents that your information was involved in the Doctor Alliance incident and is important evidence if you decide to participate in a lawsuit.

2

Place a free fraud alert or credit freeze

Compassus - Southern Massachusetts did not offer complimentary credit monitoring. Because your Social Security number may have been involved, consider placing a free fraud alert or security freeze with all three credit bureaus (Equifax, Experian, and TransUnion) and requesting your free credit reports. Taking these self-service steps does not waive your right to pursue legal action.

3

Place a fraud alert or credit freeze

Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because medical information may have been involved, also watch for unfamiliar medical bills, Explanation of Benefits statements, or claims for care you did not receive.

4

Speak with a data breach attorney

Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options under HIPAA and the Massachusetts data breach law, and advise whether you may be eligible to join a class action.

Submit your notice for a free review

Two minutes online. A licensed attorney reviews every submission.

Submit your claim
Timeline

Breach timeline

Nov 4 to 17, 2025 Passed
Unauthorized access to Doctor Alliance online portal
Nov 13, 2025 Passed
Doctor Alliance discovers suspicious activity
Feb 12, 2026 Passed
Doctor Alliance notifies Compassus - Southern Massachusetts
Apr 8, 2026 Passed
Vendor finishes providing affected-patient details
Jun 26, 2026 Passed
Notice reported to Massachusetts Attorney General, letters mailed
Pending Active
Potential class action filing
Statutes of limitations vary by state and legal theory, typically one to six years. The roughly seven-month gap between discovery and consumer notice may support procedural claims under Massachusetts law. Waiting can permanently bar your claim.
Possible recovery

Compensation you may be entitled to

Out-of-pocket expenses

Credit freezes, identity restoration services, and other costs incurred responding to the breach.

Time spent monitoring

Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.

Identity theft & fraud losses

Unreimbursed funds stolen from accounts, unauthorized credit lines, medical-claim fraud, or tax refund fraud tied to the breach.

Statutory damages

Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.

Injunctive relief

Court orders requiring Compassus - Southern Massachusetts and its vendors to implement stronger data security and vendor-oversight practices going forward.

Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.

FAQ

Common questions

I received a data breach letter from Compassus - Southern Massachusetts. What should I do? +

Keep your notice letter, since it documents that your information was involved. Because Social Security numbers and medical information may have been affected, consider placing a free fraud alert or security freeze with the three major credit bureaus, requesting your free credit reports, and watching for unfamiliar medical bills or accounts. You may also want to speak with a data breach attorney about your options.

Am I eligible to join a class action against Compassus - Southern Massachusetts? +

Individuals who received a notice from Compassus - Southern Massachusetts about the Doctor Alliance incident may be eligible. The company reported 45 affected individuals, all in Massachusetts. Eligibility can depend on your state of residence, the categories of your information involved, and whether you experienced any documented harm. A free consultation can help clarify your situation.

How much money could I receive from a class action lawsuit? +

Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.

What personal information was exposed in the breach? +

According to the notice, the information that may have been involved includes names, Social Security numbers, and medical information. Your individual letter may specify what applied to you, so it is worth reviewing carefully.

Did Compassus - Southern Massachusetts offer free credit monitoring? +

The notice does not state that Compassus - Southern Massachusetts is offering complimentary credit monitoring. Instead, it provides guidance on self-service steps such as placing fraud alerts, freezing credit, obtaining free credit reports, and reporting identity theft to the FTC. Taking any of these steps does not waive your right to pursue legal action.

How many people were affected by the Compassus - Southern Massachusetts breach? +

The company reported that 45 individuals were affected, all of them Massachusetts residents, in its filing with the Massachusetts Attorney General. This page will be updated if additional information becomes available.

Is there a deadline to take legal action? +

Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.

How do I get a copy of the official breach notice? +

The breach was reported to the Massachusetts Attorney General, and a copy of the notice is available through that office. You can download it using the link on this page. Dapeer Law can also help you obtain a copy during a free consultation.

References

Sources & references

Attorney advertising. This page is provided for informational purposes only. It does not constitute legal advice or form an attorney-client relationship. Dapeer Law, P.A. is not affiliated with Life Choice Hospice of Southern Massachusetts, LLC dba Compassus - Southern Massachusetts, Doctor Alliance, or any credit bureau. Prior results do not guarantee a similar outcome. All information regarding the data incident is drawn from the official notification filed with Massachusetts Attorney General on June 26, 2026.
Free, confidential case review

Don't let the deadline decide for you. Submit your claim today.

You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.

Why Dapeer Law

Practice focusConsumer class actions
Licensed inFL · NY · NJ · IL
Case review fee$0
Response timeSame business day
Free case review
Confidential · 2 minutes
Submit claim →
Previous
Previous

Northern Technologies International Data Breach Lawsuit Investigation

Next
Next

Rhodes, Young, Black, and Duncan Data Breach Lawsuit Investigation