{"id":256914,"date":"2026-06-05T22:05:12","date_gmt":"2026-06-05T22:05:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/us-ny\/256914\/"},"modified":"2026-06-05T22:05:12","modified_gmt":"2026-06-05T22:05:12","slug":"millions-of-nyc-health-hospital-patients-personal-data-exposed-to-cybercriminals-in-data-breach-class-action-lawsuit-claims","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/us-ny\/256914\/","title":{"rendered":"Millions of NYC Health + Hospital patients\u2019 personal data exposed to cybercriminals in data breach, class action lawsuit claims"},"content":{"rendered":"

Millions of NYC Health + Hospitals patients and staff are at lifelong risk of identity theft after a data breach<\/a> exposed their personal data \u2014 including social security numbers, medical records, credit card information and precise geolocation data \u2014 to cybercriminals, a class action<\/a> filed in Manhattan federal court alleges.\u00a0<\/p>\n

The suit alleges the city\u2019s largest public health system failed to use proper data protection measures on its systems that store patient and staff data, giving hackers easy access to comb through and sell millions of people\u2019s biometric data, like fingerprints, personal identifying documents, like passports and driver licenses, and confidential medical information, like diagnoses, treatment plans, prescriptions, imaging and health insurance details.\u00a0<\/p>\n

\u201cAs a direct and proximate result of [NYC Health + Hospitals\u2019] failure to implement and follow basic security procedures, [patient and staff] private information is now exposed to cybercriminals,\u201d says the suit, filed last month. \u201c[Patients and staff] are now at a significantly increased and certainly impending risk of fraud, identity theft, intrusion of their health privacy, and similar forms of criminal mischief, risks which may last for the rest of their lives.\u201d\u00a0<\/p>\n

The data breach is believed to have impacted current and former patients, staff, and their family members whose information was in NYC Health + Hospitals\u2019 systems between Nov. 25, 2025, and Feb. 11, 2026. The hospital system said it realized an authorized actor had accessed its system on Feb. 2 and took action to resolve the issue then.<\/p>\n

The suit charges NYC Health + Hospitals with negligence and breach of contract, alleging it violated HIPAA standards, Federal Trade Commission guidelines for protecting data and was storing certain personal identifying information it didn\u2019t need to for longer than it should have been.\u00a0\u00a0<\/p>\n

NYC Health + Hospitals did not respond to an amNewYork Law request for comment. Its initial public notice of the data breach, posted in March, says it \u201cimmediately launched a thorough investigation\u201d when it realized a breach had occurred and has \u201ctaken a number of steps\u201d to \u201cprotect against future security issues.\u201d<\/p>\n

However, the suit takes issue with the hospital system\u2019s response, saying it shouldn\u2019t have taken NYC Health + Hospitals over a month to notify people of the data breach, as it\u2019s imperative that people are able to act immediately after their personal information has been compromised so they can change passwords to avoid identity theft.\u00a0<\/p>\n

Moreover, those bringing the suit say that because the data breach compromised such sensitive information that\u2019s difficult or impossible to replace \u2013 like social security numbers, health insurance information, passports and biometrics \u2013 the hospital system needs to be held to account via financial penalties.\u00a0\u00a0<\/p>\n

Those impacted by the data breach say they\u2019ve experienced emotional and financial damages due to the stress of having their personal information at risk and having to pay for protective services to curb the potential of their identity being stolen.\u00a0<\/p>\n

The suit seeks a court order that would force the city\u2019s hospital system to up its data security protocols and to pay financial damages to those impacted, including covering the cost of at least 10 years of credit monitoring services.<\/p>\n","protected":false},"excerpt":{"rendered":"Millions of NYC Health + Hospitals patients and staff are at lifelong risk of identity theft after a…\n","protected":false},"author":2,"featured_media":256915,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[100111,2953,2710,9,56,63,65,22198,64],"class_list":["post-256914","post","type-post","status-publish","format-standard","has-post-thumbnail","category-new-york-city","tag-data-brach","tag-health","tag-law","tag-new-york","tag-ny","tag-nyc","tag-nyc-headlines","tag-nyc-health-and-hospitals","tag-nyc-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/posts\/256914","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/comments?post=256914"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/posts\/256914\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/media\/256915"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/media?parent=256914"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/categories?post=256914"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ny\/wp-json\/wp\/v2\/tags?post=256914"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}