Next Step Healthcare in Massachusetts confirmed a data breach in June 2024 that compromised Social Security numbers, medical records, financial account details, drivers’ licenses, and credit and debit card numbers of thousands of patients. The ransomware gang Qilin took credit for the attack on July 17, 2024. The breach affected at least 10,041 residents in Massachusetts and 1,697 in New Hampshire. Next Step is offering free credit monitoring to eligible victims. The breach could lead to financial exploitation, especially for elderly people who are at higher risk of identity theft.

The Maine Attorney General's Office reported a data breach involving Next Step Healthcare, LLC on May 30, 2025. The breach, which occurred on May 21, 2024, involved unauthorized access to personal information of approximately 192 Maine residents, including names, Social Security numbers, and health insurance information. Identity theft protection services were offered to those affected.