Skip to content

BryLin Hospitals

Disclosed Oct 17, 20205 years ago8,000 affectedConfirmed

Official notice

The covered entity (CE), BryLin Hospital, reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 8,000 individuals. The ePHI involved included names, dates of birth, Social Security numbers, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative and technical safeguards.

What is known

People affected8,000 (as reported to HHS)
DisclosedOct 17, 2020
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report (archive, resolved): BryLin Hospitals (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalOct 17, 20208,000
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about BryLin Hospitals

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.