Overview
- The breach, reported on March 11, 2025, exposed sensitive personal information of 5,556,702 patients, including Social Security numbers and demographic details.
- Yale New Haven Health engaged Mandiant and federal authorities to investigate the incident, which disrupted IT systems but did not impact patient care.
- Exposed information did not include financial or medical treatment details, and impacted individuals are being offered free credit monitoring and identity protection services.
- Class action lawsuits are being prepared on behalf of affected patients, seeking compensation for the exposure of their sensitive data.
- No ransomware group or threat actor has claimed responsibility for the attack, leaving the perpetrators and their motives unknown.