YALE UNIVERSITY

Yale University (CT) reported to HHS OCR on 2022-11-11 a ransomware incident affecting 9,051 individuals. Breached PHI was located on a Network Server and included names, Social Security numbers, addresses, driver's license numbers, dates of birth, financial and claims information, diagnoses, medications, and other treatment information. Yale notified HHS, affected individuals, and media, posted substitute notice, offered free credit monitoring, and implemented additional safeguards and staff retraining.

Affected (this filing): 9,051

Yale University reported a ransomware incident affecting at least one New Hampshire resident. Unauthorized access occurred around August 11, 2022, detected September 12, 2022. Patient data from Connecticut Plastic Surgery Group (2009-2021) was encrypted, including PHI, SSNs, and credit card numbers. Yale notified the NH AG on Nov 11, 2022, and offered 24 months of credit monitoring.

Affected (this filing): 1