Yale New Haven Health Services Corporation

Yale New Haven Health (YNHHS) notified consumers of a data breach involving its vendor, Tobin, Carberry, O'Malley, Riley & Selinger, P.C. (TCORS). An unauthorized third party accessed TCORS's network between November 10 and 30, 2023, copying files containing patient PII and PHI, including SSNs, DOBs, and medical history. YNHHS is offering one year of identity theft protection. The incident affected at least 689 Rhode Island residents.

Affected (this filing): 689

Supplemental notice regarding a cybersecurity incident at vendor Tobin, Carberry, O'Malley, Riley & Selinger, P.C. (TCORS), a business associate of Yale New Haven Health (YNHH). Unauthorized access occurred Nov 10-30, 2023. TCORS notified YNHH on Dec 4, 2023. YNHH notified 5 impacted individuals on July 19, 2024. Data included PII, SSN, PHI, and bank info. Third-party forensics engaged. Identity theft protection offered.

Affected (this filing): 5

Yale New Haven Health notified individuals of a security incident involving its vendor, Tobin, Carberry, O'Malley, Riley & Selinger, P.C. An unauthorized third party accessed TCORS's network from November 10-30, 2023, copying files containing patient information. YNHHS was notified on December 4, 2023. Notices were sent on November 18, 2024, offering identity theft protection services. The incident involved a supply chain compromise where a third-party vendor's credentials were likely used.