New York-Presbyterian Hospital

Profile narrative

New York-Presbyterian Hospital operates as a healthcare facility providing medical services to patients in the United States. It delivers inpatient and outpatient care through its affiliated facilities. The organization focuses on diagnosing and treating a range of medical conditions for individuals seeking care. Its services include routine examinations, specialized treatments, and emergency medical support. The hospital functions as part of the broader healthcare system serving local communities. It maintains a workforce of clinical and administrative staff to support patient care.

In September 2022, the hospital experienced a cybersecurity incident involving unauthorized access to workforce laptops through a cloud-based remote IT support program. The breach allowed a threat actor to copy and remove desktop files containing protected health information. Approximately 12,000 patients from two affiliated facilities had their data exposed, including names, addresses, insurance authorizations, medical record numbers, and exam results. Internal security monitors detected suspicious server activity, which led to an investigation that confirmed the breach. Following the investigation, the organization notified affected individuals through its website. The incident highlighted the importance of securing remote access tools within healthcare environments.

Incidents

1 incident linked to this organisation.