Yale New Haven Health Reports Data Breach Affecting 5.6 Million Individuals

Yale New Haven Health has disclosed a data breach impacting approximately 5.6 million individuals — the largest healthcare-related breach reported to federal regulators so far in 2025. The Connecticut-based health system detected suspicious activity on its IT systems in early March. A subsequent investigation revealed that an unauthorized third party had accessed its network and extracted copies of some patient data.

The breach did not disrupt patient care, nor did it affect Yale New Haven’s electronic health record system or patient portal. Exposed information includes demographic details, Social Security numbers, medical record numbers, and patient type, although financial and HR data remained secure.

This incident follows a surge in cyberattacks on the healthcare industry, including a ransomware attack on Change Healthcare earlier this year that compromised data on roughly 190 million people. Experts warn that healthcare remains a prime target due to the high black-market value of stolen medical records.

28-04-2025