On April 11, 2025, YNHHS informed the public that its investigation into the incident confirmed a data breach that may have exposed sensitive patient information to unauthorized actors. Starting on April 14, 2025, YNHHS mailed letters to patients confirmed to have been impacted by the incident, enclosing instructions on enrolling in complimentary credit monitoring and identity protection services for those with their SSN exposed. Bill Toulas Bill Toulas is a tech writer and infosec news reporter with over a decade of experience working on various online publications, covering open-source, Linux, malware, data breach incidents, and hacks. Yale New Haven Health (YNHHS) is warning that threat actors stole the personal data of 5.5 million patients in a cyberattack earlier this month. Yale New Haven Health hired Mandiant to help with system restoration and forensic investigation while federal authorities were notified about the incident. A new entry on the U.S. Department of Health and Human Services breach portal confirmed that the data breach impacted 5,556,702 patients. Given the extent of the impact, class action lawsuits are already being prepared by law firms representing impacted individuals seeking reimbursement for the exposure of their sensitive information. At the time of writing, no ransomware groups have taken responsibility for the attack at Yale New Haven Health, so the attackers remain unknown.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Thu, 24 Apr 2025 14:15:13 +0000