NYC Health Notifying Patients of 2 Third-Party Hacks

Incidents Are Unrelated, Says NYC Health + Hospitals Marianne Kolbasuk McGee (HealthInfoSec) • March 26, 2026

Hackers had access to New York City's municipal healthcare system for nearly three months before being detected, stealing data of an undisclosed number of patients.

See Also: AI Impersonation Is the New Arms Race—Is Your Workforce Ready?

The incident is the second hacking-related data breach within weeks involving a third-party firm hired by public benefit corporation New York City Health and Hospitals Corp.

Better known as NYC Health + Hospitals, the hospital system serves more than 1 million patients annually as a safety-net health system with 70 locations across the city's five boroughs.

In a March 24 breach notice, the system said hackers appeared to have gained access to its systems "due to a ...