Yale New Haven Health Exposes 5 Million Americans' Personal Information

A data breach at Yale New Haven Health (YNHHS) occurred on March 8th, exposing personal information of millions of people. The breach impacted approximately 5,556,702 patients and exposed demographic information, Social Security numbers, patient types, and medical record numbers. YNHHS reported the incident to law enforcement with the help of external cybersecurity experts from Mandiant, but did not notify patients until late April. Patients whose Social Security number was involved are now eligible for complimentary credit monitoring and identity protection services. Lawsuits have already been filed by two individuals against YNHHS, alleging that the organization failed to protect personally identifiable information and took too long to notify patients, with damages sought including free lifetime identity protection and major changes to cybersecurity practices.