Yale New Haven Well being (YNHHS) is warning that menace actors stole the private knowledge of 5.5 million sufferers in a cyberattack earlier this month.
YNHHS is a nonprofit healthcare community in Connecticut, the biggest within the state, offering complete care throughout 5 hospitals and 360 outpatient places. It employs 30,000 well being professionals and has an annual income of over $5.6 billion.
On March 11, 2025, the group first reported that it was coping with a cybersecurity incident that occurred three days earlier. This incident triggered IT system disruptions however didn’t influence affected person care.
Yale New Haven Well being employed Mandiant to assist with system restoration and forensic investigation whereas federal authorities had been notified concerning the incident.
On April 11, 2025, YNHHS knowledgeable the general public that its investigation into the incident confirmed an information breach that will have uncovered delicate affected person info to unauthorized actors.
The stolen info varies by affected person and contains the next:
- Full identify
- Date of beginning
- Dwelling deal with
- Phone quantity
- Electronic mail deal with
- Race/ethnicity
- Social Safety quantity (SSN)
- Affected person kind
- Medical report quantity
It was clarified that the publicity didn’t embrace monetary info, medical information, or therapy particulars.
Beginning on April 14, 2025, YNHHS mailed letters to sufferers confirmed to have been impacted by the incident, enclosing directions on enrolling in complimentary credit score monitoring and id safety companies for these with their SSN uncovered.
A brand new entry on the U.S. Division of Well being and Human Companies breach portal confirmed that the information breach impacted 5,556,702 sufferers.
Given the extent of the influence, class motion lawsuits are already being ready by legislation corporations representing impacted people in search of reimbursement for the publicity of their delicate info.
On the time of writing, no ransomware teams have taken duty for the assault at Yale New Haven Well being, so the attackers stay unknown.
