Loading story…
The New York Blood Center (NYBC), one of the largest independent blood centers in the U.S., has begun notifying victims of a data breach after a ransomware attack in January 2025. Attackers accessed the network between January 20 and 26, exfiltrating sensitive data including patient and employee information. The breach impacts at least 10,557 individuals in Texas alone, with the total number of affected individuals likely in the tens of thousands.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
4 references tracked. Mallory keeps watching after this page renders.
malwarebytes.com
Open sourcescworld.com
Open sourcetherecord.media
Open sourcetechtarget.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OneBlood, a non-profit organization supplying blood to 250 hospitals across four states, experienced a significant ransomware attack in July 2024. The cybercriminals gained unauthorized access to OneBlood's computer network between July 14 and July 29, 2024. As a result of this breach, the personal information of approximately 167,400 individuals was compromised or potentially exposed. The compromised data included names, Social Security numbers, payment card information, and sensitive medical data. Following the incident, OneBlood faced a proposed class action lawsuit from affected individuals. To resolve the litigation, OneBlood agreed to a $1 million settlement, which was preliminarily approved by a Broward County, Florida circuit court. Under the terms of the settlement, affected individuals are eligible to claim up to $2,500 for documented losses or opt for a $60 cash payment. A final court hearing regarding the settlement is scheduled for December 9. OneBlood has denied any wrongdoing in connection with the incident. The attack on OneBlood was part of a broader trend, as several other blood suppliers in the US and UK also suffered cyber incidents during the same period. The breach highlighted the vulnerability of healthcare and critical infrastructure organizations to ransomware attacks. The incident prompted OneBlood to notify all affected donors and individuals whose data may have been compromised. The organization undertook an internal investigation to determine the scope and impact of the breach. The settlement aims to provide financial relief to those impacted by the exposure of their sensitive information. The case underscores the increasing financial and reputational risks faced by healthcare providers in the wake of cyberattacks. The attack and subsequent settlement have drawn attention to the need for enhanced cybersecurity measures in the healthcare sector. The incident also serves as a warning to other organizations handling sensitive personal and medical data. Regulatory scrutiny and litigation risks are likely to increase for organizations that experience similar breaches. The OneBlood case demonstrates the potential costs and consequences of ransomware attacks on critical service providers.
Jun 29, 2026
NYC Health + Hospitals disclosed that attackers accessed its network for nearly three months and copied sensitive files affecting about **1.8 million** people. The intrusion reportedly began around **November 25, 2025** and continued until **February 11, 2026**, with suspicious activity first detected on **February 2**. The organization said the breach appears to have originated through a compromised third-party vendor and later reported the incident to the U.S. Department of Health and Human Services Office for Civil Rights. Stolen information included personal and medical records, insurance and billing details, payment data, government-issued identifiers, precise geolocation data, and biometric data such as **fingerprints** and **palm prints**, raising particular concern because biometric identifiers cannot be reissued once exposed. NYC Health + Hospitals said it engaged external cybersecurity specialists, reset affected credentials, added security technologies, strengthened monitoring and detection rules, updated remote access controls, and is offering **two years** of Kroll identity theft protection and credit monitoring to affected patients and employees.
Jun 29, 2026
Several healthcare providers in the United States have recently disclosed significant data breaches resulting from cyberattacks, with patient and employee information being compromised. AllerVie Health, based in Texas, confirmed unauthorized access to its network, exposing sensitive data such as names, Social Security numbers, and insurance details, allegedly due to a ransomware attack by the Anubis group. The attackers claim to have stolen records of over 30,000 patients, and affected individuals have been offered credit monitoring and identity theft protection. In a separate incident, OrthopedicsNY, a healthcare provider in New York, suffered a breach in 2023 after attackers gained remote access using compromised credentials, leading to the exposure of data belonging to more than 650,000 patients and employees. The New York Attorney General secured a $500,000 penalty from OrthopedicsNY for failing to implement adequate security measures, and the provider is now required to enhance its data protection practices. Additionally, Singing River Health System in Mississippi reported a cyber incident that led to the temporary shutdown of its patient portal and internet access as a precaution. While the threat was reportedly mitigated, the investigation is ongoing to determine if patient records were accessed. These incidents highlight the ongoing risks faced by healthcare organizations from ransomware groups and other cybercriminals, as well as the increasing regulatory scrutiny and financial penalties for failing to protect sensitive health information. Impacted organizations are responding with offers of credit monitoring and reviews of their security policies, but the breaches underscore the need for robust cybersecurity measures in the healthcare sector.
Jun 29, 2026