- Yale New Haven Health underwent a cyber attack in early March 2025
- A subsequent survey has shown sensitive data theft
- More than five million people could have been affected
A recent cyber attack on Yale New Haven Health (YNHHS) may have led to the theft of sensitive data of more than five million people.
The non -profit health care network has confirmed the news in a legal notice published on his website, where he declared that he had identified an “unusual activity” on his computer systems on March 8, 2025.
The subsequent survey, carried out with the help of a third -party legal medicine expert, has shown that “copies of certain data” have been stolen.
Inputing collective appeal contacts
“At no time did this incident influence our ability to provide care for patients,” said Ynhhs.
The organization then detailed stolen information: people’s names, birth dates, addresses, telephone numbers, email addresses, race and ethnicity, social security numbers, patient-type information and / or medical file numbers.
Electronic medical records and processing information has not been stolen, the organization stressed and added that the crooks had not stolen financial accounts or payment information.
Although the opinion has not discussed the number of affected individuals, Bleeping Compompute I found a new entry on the American violation portal of the Ministry of Health and Social Services, where it indicates that 5,556,702 patients are affected.
The publication indicates that, taking into account the extent of the impact, collective appeals are “already under preparation” by law firms representing affected persons who will require reimbursement.
At the time of the press, no threat actor has assumed the responsibility of the attack, and the data has not yet surfaced on the dark canvas.
In general, health care industry organizations are an attractive target for cybercriminals, due to the sensitivity of the files they generate, and the fact that many are still performing outdated and neglected software.
In mid-March 2025, for example, Sunflower Medical Group and Community Care Alliance confirmed that they have suffered from a cyber attack and to lose data on some 300,000 people.