A data security incident at a care management partner of NYC Health + Hospitals resulted in the unauthorized access of protected health information for 5,086 patients.
The incident involved NADAP, a care management agency partner that provides care coordination services to individuals receiving services under NYC Health + Hospitals’ Lead Health Home program. The breach occurred on or around Nov. 26, 2025, and was discovered by NADAP on Jan. 10, 2026, according to a March 11 news release from the healthcare organization.
NYC Health + Hospitals said it was notified of the incident Jan. 27.
Information accessed during the incident included patients’ names, dates of birth, addresses, Medicaid numbers and clinical information related to their health home care provided by NADAP, as well as Social Security numbers.
After discovering the unauthorized activity, NADAP isolated the affected systems and took them offline. The organization also engaged third-party experts to investigate the incident and strengthen system security, and notified law enforcement, the release said.
NYC Health + Hospitals also reported the incident to the Office for Civil Rights, the federal agency responsible for oversight of unauthorized disclosures of protected health information.
Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit
