Yale New Haven Well being (YNHHS) is warning that menace actors stole the non-public knowledge of 5.5 million sufferers in a cyberattack earlier this month.
YNHHS is a nonprofit healthcare community in Connecticut, the biggest within the state, offering complete care throughout 5 hospitals and 360 outpatient areas. It employs 30,000 well being professionals and has an annual income of over $5.6 billion.
On March 11, 2025, the group first reported that it was coping with a cybersecurity incident that occurred three days earlier. This incident precipitated IT system disruptions however didn’t affect affected person care.
Yale New Haven Well being employed Mandiant to assist with system restoration and forensic investigation whereas federal authorities have been notified concerning the incident.
On April 11, 2025, YNHHS knowledgeable the general public that its investigation into the incident confirmed a data breach that will have uncovered delicate affected person info to unauthorized actors.
The stolen info varies by affected person and consists of the next:
- Full identify
- Date of beginning
- Residence handle
- Phone quantity
- Electronic mail handle
- Race/ethnicity
- Social Safety quantity (SSN)
- Affected person sort
- Medical file quantity
It was clarified that the publicity didn’t embody monetary info, medical data, or remedy particulars.
Beginning on April 14, 2025, YNHHS mailed letters to sufferers confirmed to have been impacted by the incident, enclosing directions on enrolling in complimentary credit score monitoring and identification safety companies for these with their SSN uncovered.
A brand new entry on the U.S. Division of Well being and Human Companies breach portal confirmed that the data breach impacted 5,556,702 sufferers.
Given the extent of the affect, class motion lawsuits are already being ready by regulation companies representing impacted people searching for reimbursement for the publicity of their delicate info.
On the time of writing, no ransomware teams have taken duty for the assault at Yale New Haven Well being, so the attackers stay unknown.
