DisclosureLens
MalwareHealthcareHealthcareRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDHealth (basic)MediumContained

Yale New Haven Health Services Corporation

bd_f4e7714c29729541 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 26, 2021

Filed

Jul 23, 2021

To disclose

8 weeks

Affected

2state residents only

Linked

3 filings

Confidence

66%
Full breach record for Yale New Haven Health Services Corporation5 incidents on file

Yale New Haven Health Services Corporation (YNHHS) notified the New Hampshire Attorney General of a security incident involving its vendor, Elekta, Inc. An unauthorized party accessed Elekta's SmartClinic database between April 2 and April 20, 2021, exfiltrating patient data including names, SSNs, and PHI. YNHHS identified 2 affected New Hampshire residents. YNHHS offered 24 months of credit monitoring and established a call center. The incident was part of a broader ransomware attack on Elekta's clients.

Incident timeline

undetected · 54 days
discovery → filing · 8 weeks / 58 days

Apr 2, 2021

Begins

May 26, 2021

Discovered

Jul 23, 2021

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident
Part of Elekta supply-chain incident (2021) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Massachusetts State AGJul 23 · first
HHS OCRJul 23 · first
New Hampshire State AGJul 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.