Massive Data Breach at NYC Health and Hospitals Affects 1.8 Million Patients

NYC Health and Hospitals reported a significant data breach affecting at least 1.8 million individuals. The breach, which lasted from November 25, 2025, to February 2, 2026, was caused by unauthorized access through a compromised third-party vendor. Sensitive data stolen includes medical records, personal identification, financial information, and biometric data such as fingerprints and palm prints. This incident is one of the largest healthcare data breaches of 2026, raising serious concerns due to the irreversible nature of biometric data theft. The breach was detected on February 2, 2026, prompting immediate security measures. The organization is currently reviewing the affected data and has reported the incident to the U.S. Department of Health and Human Services.

Key Points: • 1.8 million individuals affected by the breach, making it one of the largest in 2026. • Sensitive data stolen includes medical records, financial information, and biometric data. • The breach lasted over two months before detection, highlighting significant security vulnerabilities.