Refuah Health Center
Disclosed Jan 5, 20242 years ago250,000 affectedSettled
Ransomware compromised 250,000 patients' data; USD 450,000 and USD 1.2M security spend
Refuah Health Center failed to encrypt patient data or use MFA and suffered a ransomware attack compromising personal and health information of about 250,000 New Yorkers. It agreed to pay USD 450,000 and invest USD 1.2M in security.
What is known
| People affected | 250,000 (as reported by the organization) |
|---|---|
| Disclosed | Jan 5, 2024 |
| Attack | Ransomware |
| Data exposed | Health, Names |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | USD 450,000 NY AG penalties and costs plus USD 1.2M security investment (Jan 2024) (about $450K) |
Sources
| Source | |
|---|---|
| NY AG: Agreement with Hudson Valley health care providerag.ny.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 5, 2024 | 250,000 |
Other breaches at Refuah Health Center
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Apr 29, 2022Apr 29, 20224 years agoHacking | Apr 29, 20224 years ago | Hacking | Healthcare | Confirmed | 261K |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.