Not a law firm.We connect people affected by data breaches with independent attorneys.

Incident information

Was Your Information Involved in the Suffolk County Jail Health Records Incident? Learn About Your Options

Information about this incident and a simple way to see if you may qualify to be connected with independent attorneys.

What happened

Around September 17, 2026, Computer Systems Integrated Inc. (CSI) confirmed a cybersecurity incident involving the EHRs-C electronic health-record platform used at the Suffolk County House of Correction and the Nashua Street Jail in Boston. CSI is affiliated with Correctional Psychiatric Services (CPS Healthcare). Public reporting states the incident involved prisoner health data and medical records, that law enforcement is assisting, and that the Suffolk County Sheriff's Department said its own servers were not involved.

According to those reports, the information involved may include:

Inmate electronic health records and medical information
Personally identifiable information associated with those records

The companies have said they found no sign that data from other Massachusetts correctional facilities was affected. The exact number of people affected and whether any records left the network have not been publicly confirmed. The two jails house roughly 1,500 people on a typical day. As of the date of this page, we are not aware of any lawsuit filed over this incident.

If you were incarcerated at either facility during the relevant period, or you believe your or a family member's health information was maintained in the EHRs-C system, you may want to understand your options. With your consent, the form below lets us share your information with independent law firms that may contact you.

DataBreachRelief.com is not a law firm and does not provide legal advice. With your consent, information you submit may be shared with one or more independent law firms. Submitting information does not create an attorney-client relationship, and no outcome is guaranteed.

Possible remedies

Possible remedies, if any, depend on the facts of your situation and the applicable law. No outcome or payment is guaranteed.

Official source

Read the original public notice or report about this incident (opens in a new tab):

https://databreaches.net/2026/09/29/data-breach-incident-targets-prisoner-medical-records-at-2-mass-jails/

See if you may qualify

Believe your information was involved? See if you may qualify to connect with an independent attorney.

First nameLast nameEmail addressPhone (optional)State of residenceBriefly describe how you were affected (optional)

Optional. Please do not include Social Security numbers, dates of birth, account numbers, or medical details.

I agree to the Terms and Privacy Policy and consent to DataBreachRelief.com sharing my information with one or more independent law firms, who may contact me about my potential claim by email or phone. I understand this does not create an attorney-client relationship.Optional: I agree to receive calls/texts, including automated, from DataBreachRelief.com and partner law firms at the number provided. Consent is not a condition of service. Msg & data rates may apply. Reply STOP to opt out.

Thank you. Your information has been received. If a participating law firm is interested in your situation, they may contact you.

Sorry, something went wrong and your information was not sent. Please try again.

DataBreachRelief.com is not a law firm and does not provide legal advice. We are an independent information and referral service. Information you submit may be shared with one or more independent law firms that may contact you about your potential claim. Submitting information does not create an attorney-client relationship. Listing an incident does not mean a lawsuit has been filed, and no outcome is guaranteed. Attorneys who receive referrals may pay us a fee for advertising or lead services.