Breachesby GlyphMemorial Sloan Kettering Cancer Center
Disclosed Jun 25, 202412,274 affectedConfirmed
The covered entity (CE), Memorial Sloan Kettering Cancer Center, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 12,274 individuals. The PHI involved names, addresses, dates of birth, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were retrained on email security.
What is known
| People affected | 12,274 (as reported to HHS) |
|---|---|
| Disclosed | Jun 25, 2024 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Memorial Sloan Kettering Cancer Center
Insider breachInsider exposed names and health records. Reported to the HHS archive.74K affectedHealthcareUSSep 14, 2020Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.2,279 affectedHealthcareUSNov 13, 2013Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.568 affectedHealthcareUSJun 8, 2012
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.