Personal data of millions of patients were compromised in a cyberattack in the US

NYC Health and Hospitals, the largest public healthcare system in the United States, has suffered a major cyberattack, according to Zamin.uz.

The incident has officially confirmed that the personal and medical data of at least 1.8 million patients, as well as their fingerprints, were compromised. Preliminary investigations indicate that hackers gained access through an external service provider.

The unauthorized activity persisted over an extended period, with data exfiltration occurring from November 2025 to February 2026, as reported by international technology publications.

The scope of the compromised data is raising serious concerns among experts. It includes patients’ medical insurance documents, diagnoses, prescribed medications, and all billing records.

Additionally, Social Security numbers, passport information, and copies of driver’s licenses were also accessed by the attackers. Precise geographic location data recorded when documents were uploaded to the system is also considered highly likely to have been leaked.

This poses a serious threat to the personal safety of affected individuals. The most alarming aspect is that hackers did not only obtain textual information but also biometric identifiers of patients and healthcare staff.

Specifically, digital copies of fingerprints and palm prints were stolen. Because biometric data remains unchanged throughout a person’s life, its exposure creates long-term security risks that could persist for years.

Us, Nyc Health And Hospitals, Zamin.uz, November 2025, February 2026