Morgan & Morgan Investigates Major Data Breach at Yale New Haven Health System

Morgan & Morgan’s industry leading data privacy attorneys are investigating Yale New Haven Health System regarding its recent data breach (sometimes referred to as a data security incident). The Yale New Haven Health System data breach may have compromised the sensitive personal identifiable information of approximately 5.6 million individuals.

We are investigating, among other things, the following:

• How Yale New Haven Health acquired and stored this sensitive information;
• Whether Yale New Haven Health should have maintained this information in the manner it did;
• Why Yale New Haven Health stored this sensitive information in a potentially vulnerable system;
• Whether Yale New Haven Health encrypted the sensitive information it stored;
• Whether Yale New Haven Health retained sensitive data longer than reasonably necessary;
• Whether Yale New Haven Health implemented appropriate and adequate security measures to protect the information; and
• Whether Yale New Haven Health has provided affected individuals adequate protection and compensation for any harms they have experienced as a result of the data breach.
   

On April 18, 2024, Yale New Haven Health System reported that it experienced a cybersecurity incident in which sensitive patient data—including names, Social Security numbers, medical record numbers, and patient type—may have been accessed by unauthorized individuals. The breach reportedly involved a third-party vendor and impacted patients across its five-hospital system in Connecticut and Rhode Island.

Yale New Haven Health System has stated that they are working with cybersecurity firm Mandiant and federal authorities to investigate the incident and mitigate further risk. However, patients have reported disruptions in access to online services, and many are still awaiting direct notification about their exposure.

If you received a data breach notification from Yale New Haven Health System in 2025 or believe your medical information was compromised, please contact us through our Free Case Evaluation Form. 

We place a significant amount of trust in the healthcare providers we rely on for our well-being—making the actions of Yale New Haven Health System all the more troubling. If you suspect that your information was exposed in the Yale New Haven Health data breach, Morgan & Morgan is here to help.