Yale New Haven Health

Yale New Haven Health suffered a massive data breach exposing the protected health information (PHI) of 5,556,702 individuals, making it the largest healthcare data breach of 2025. The incident compromised sensitive patient records, including medical histories, treatment details, and personally identifiable information (PII). Such a breach poses severe risks, including identity theft, medical fraud, and unauthorized disclosure of confidential health data. The scale of the breach suggests a systemic failure in cybersecurity defenses, potentially due to phishing, unpatched vulnerabilities, or third-party vendor compromises. Given the healthcare sector’s regulatory obligations (HIPAA), the breach will likely result in heavy fines, legal repercussions, and long-term reputational damage. Patients may face targeted scams, blackmail, or discriminatory risks if their medical conditions are exposed. The incident also undermines public trust in digital health systems, possibly leading to patient attrition and financial losses from remediation efforts, lawsuits, and regulatory penalties.

Source: https://www.teiss.co.uk/news/yale-new-haven-health-confirms-data-breach-impacting-55-million-individuals-largest-healthcare-incident-of-2025-16637

TPRM report: https://www.rankiteo.com/company/yale-new-haven-health-system

"id": "yal0632206103125",
"linkid": "yale-new-haven-health-system",
"type": "Breach",
"date": "5/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': '5,556,702 individuals',
                        'industry': 'Healthcare',
                        'location': 'New Haven, Connecticut, USA',
                        'name': 'Yale New Haven Health',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Public notification of breach',
 'data_breach': {'number_of_records_exposed': '5,556,702',
                 'personally_identifiable_information': 'Yes (PHI includes '
                                                        'PII)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Protected Health Information '
                                              '(PHI)']},
 'description': 'Yale New Haven Health has disclosed a data security incident '
                'that compromised the protected health information of up to '
                '5,556,702 individuals, marking the largest healthcare data '
                'breach reported in 2025.',
 'impact': {'brand_reputation_impact': 'High (largest healthcare breach of '
                                       '2025)',
            'data_compromised': ['Protected Health Information (PHI)'],
            'identity_theft_risk': 'High (PHI exposed)'},
 'investigation_status': 'Disclosed (ongoing or completed not specified)',
 'regulatory_compliance': {'regulations_violated': ['HIPAA (likely)']},
 'response': {'communication_strategy': 'Public disclosure'},
 'title': 'Yale New Haven Health Data Breach (2025)',
 'type': 'Data Breach'}