Healthcare data breaches are occurring with increasing frequency, raising alarm across the industry. A significant incident was reported by Yale New Haven Health (YNHHS), a prominent nonprofit healthcare provider in Connecticut. In March 2025, hackers unlawfully accessed and retrieved sensitive information from over 5.5 million patients.

Additionally, numerous other serious security incidents have been disclosed recently. For example, Blue Shield of California experienced a data exposure impacting 4.7 million members linked to Google, while Maryland’s Frederick Health Medical Group faced a breach that affected nearly one million patients.

Incident Overview at Yale New Haven Health

A public disclosure from YNHHS indicates that the organization became aware of “suspicious activity” on its network on March 8, 2025. This investigation revealed unauthorized third-party access, allowing attackers to extract various patient details. The stolen information may include, but is not limited to:

• Name
• Date of birth
• Residential address
• Phone number
• Email address
• Race
• Ethnicity
• Social Security number
• Type of patient
• Medical record identifier

Yale New Haven Health assured that the breach did not involve access to medical treatment records or financial information such as billing details.

Steps to Take If Your Data Was Affected

Individuals who have received care through YNHHS may find their information compromised. Notifications began being sent to affected patients on April 14, so check your mail for an official letter.

To assist those impacted, YNHHS is offering free credit monitoring and identity protection services for patients whose Social Security numbers were compromised. Details regarding these services are expected to be included in the notification letters. For inquiries related to the incident, a support line is available at 855-549-2678, operating Monday through Friday, from 9 a.m. to 9 p.m. ET.

Furthermore, class action lawsuits are anticipated as legal actions emerge concerning the breach, so it’s advisable to stay updated on potential developments.

While it’s impossible to regain stolen data, steps can be taken to mitigate its negative repercussions. Freezing your credit, establishing a fraud alert, and regularly reviewing your credit reports are proactive measures. It’s also vital to safeguard your Social Security number to reduce the risk of identity theft. Review medical invoices and statements from YNHHS, immediately reporting any inconsistencies. Additionally, practice good digital hygiene by avoiding clicking on links in suspicious communications.