Yale New Haven (Conn.) Health reported to the HHS data breach portal that a cybersecurity incident in March affected 5,556,702 individuals.
The health system detected unusual activity on its IT systems March 8. An investigation revealed that an unauthorized third party accessed the system’s network and obtained copies of certain data.
The compromised information varied by patient and could include names, dates of birth, addresses, telephone numbers, email addresses, race or ethnicity, as well as Social Security numbers, patient type and/or medical record numbers.
Yale New Haven Health said it would notify all affected patients by April 14 if their information had been compromised.
The health system is facing two federal lawsuits filed by patients alleging they were harmed by the breach.
