Summary
Yale New Haven Health agreed to pay $18 million to settle a lawsuit over a data breach that affected more than five million people. The breach involved unauthorized access to personal and medical information, prompting a lawsuit that accused the health system of failing to adequately protect this sensitive data. The settlement includes compensation for those affected and measures to improve data security.
Key Facts
- Over five million people were affected by a data breach at Yale New Haven Health in March 2025.
- The breach involved unauthorized access to personal information like Social Security numbers and medical record numbers.
- Yale New Haven Health agreed to an $18 million settlement covering legal fees, administrative costs, and up to $5,000 for documented losses per person.
- The settlement also includes two years of medical data monitoring for class members.
- A class action lawsuit accused the health system of negligence in protecting patient data.
- The final approval hearing for the settlement is set for March 3, 2026.
- Yale New Haven Health denied any wrongdoing but settled to avoid prolonged legal proceedings.
- The health system is one of Connecticut's largest employers, with over 31,000 employees.
