LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach

Key Points:

• LeakNet claims to have stolen 11TB of data from NYC Health + Hospitals, potentially affecting over 12 million individuals, although this figure has not been confirmed by the health system.
• The breach has been confirmed to affect at least 1.8 million people, with compromised data including medical records, Social Security numbers, and other sensitive information. The unauthorized access occurred between November 25, 2025, and February 11, 2026.
• Organizations should enhance monitoring of third-party vendor security practices and ensure robust incident response plans are in place. Patients should be advised against downloading leaked files.

Technical Details: The breach is linked to unauthorized access via a third-party vendor, with sensitive data being copied during the incident. No specific CVE IDs were mentioned.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned: None mentioned