Breachesby GlyphRefuah Health Center
Disclosed Jan 5, 2024250,000 affectedSettled
Ransomware compromised 250,000 patients' data; USD 450,000 and USD 1.2M security spend
Refuah Health Center failed to encrypt patient data or use MFA and suffered a ransomware attack compromising personal and health information of about 250,000 New Yorkers. It agreed to pay USD 450,000 and invest USD 1.2M in security.
What is known
| People affected | 250,000 (as reported by the organization) |
|---|---|
| Disclosed | Jan 5, 2024 |
| Attack | Ransomware |
| Data exposed | HealthNames |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | USD 450,000 NY AG penalties and costs plus USD 1.2M security investment (Jan 2024) (about $450K) |
Sources
Notices filed
Other breaches at Refuah Health Center
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.