The Massachusetts Cannabis Control Commission sent out a notice late on Thursday evening to inform individuals that their information may have been shared by the agency inadvertently. According to the update the personal identifying information of agents was disclosed in response to a public records request. The information included names, residential addresses, email addresses, phone numbers, and dates of birth of employees and potentially even owners of cannabis establishments in the state.
The release of this information pertains only to current and former agents who registered with the Commission. Sensitive information such as financial information, bank accounts, or social security numbers were not disclosed according to the statement. Patient and caregiver data is not included in this release. The Commission also points out that the information that was sent is a matter of public record but was not meant to be disclosed. After consulting with the Office of the Attorney General and the Office of Consumer Affairs and Business Regulation it was ultimately decided to inform those who were affected by the mistake. The Commission did request that the party who received the agent information delete it immediately. At this time the Commission has not disclosed who the recipient of the inadvertent release of information is.
Find the announcement from the Cannabis Control Commission on their website here: https://masscannabiscontrol.com/2023/03/inadvertent-records-release/
