2026 NYC Health + Hospitals — LeakNet 11TB / 12M claim (unverified)
Data compromised
Actor-claimed medical, financial, and biometric records in an ~11TB archive — unverified; not confirmed as a separate count above the health system’s 1.8M disclosure
Technical writeup
Unverified LeakNet / extortion claim — July 27, 2026 (Hackread coverage July 30). LeakNet posted preview screenshots and claimed an ~11TB archive from NYC Health + Hospitals linked to more than 12 million people, threatening further publication. NYC Health + Hospitals had already disclosed a third-party vendor-related incident (detected Feb 2, 2026; window ~Nov 25, 2025–Feb 11, 2026) with an attested HHS/public count of about 1.8 million people — catalogued separately. Hackread notes row totals are not the same as unique patients and that NYCHH had not publicly addressed the July LeakNet post at indexing time. Treat the 12M / 11TB figures as actor claims only until the health system or regulators confirm a higher count.
Root cause
Unverified LeakNet extortion claim alleging 11TB archive and ~12M people — distinct from HHS-attested 1.8M vendor-breach count
References
- https://hackread.com/leaknet-11tb-stolen-nyc-health-hospitals-data-breach/
- https://www.nychealthandhospitals.org/pressrelease/notice-of-data-breach/
- https://techcrunch.com/2026/05/18/nyc-health-and-hospitals-says-hackers-stole-medical-data-and-fingerprints-during-breach-affecting-at-least-1-8-million-people/