Inmate medical records are in play after a cyberattack at a vendor that runs the electronic health record platform for Boston’s two county jails.
The platform, EHRs-C, serves the Suffolk County House of Correction and the Nashua Street Jail. It belongs to a small corporate family: Computer Systems Integrated Inc., which is affiliated with Correctional Psychiatric Services, also known as CPS Healthcare, a Quincy contractor that supplies healthcare inside the Suffolk County Sheriff’s Department and jails across Bristol, Plymouth, Norfolk and Middlesex counties. Dr. Jorge Veliz, a psychiatrist and one-time medical director at Bridgewater State Hospital, owns both companies.
CPS Healthcare’s chief operating officer, Beth Cheney, said investigators have found no sign that data from other Massachusetts lockups was caught up in the incident, and confirmed law enforcement is assisting. She declined to say how much was taken or whether anything left the network. The two jails house roughly 1,500 people on a typical day.
The sheriff’s department said its own servers were not involved and that the matter sits with its contracted provider.
What makes correctional health data distinctive is its breadth – medical, psychiatric and substance-use histories bundled together. Those details cannot be reissued the way a password can, and the notification duty ultimately lands on the healthcare entity, not the vendor.
