Back to Industry

IndustryData Breach

moderateAnti-PrivacyData Breach

Executive Summary

Weill Cornell Medicine discloses an insider data breach: On February 23, HHS received a breach submission from Weill Cornell Medicine in New York. The submission reported that 516 patients were affected by an incident involving Unauthorized Access/Disclosure of data in Electronic Medical Records (EMR). DataBreaches emailed the...

What Happened

Weill Cornell Medicine in New York submitted a breach report to the Department of Health and Human Services on February 23, 2026, disclosing that 516 patients were affected by unauthorized access to or disclosure of data in their electronic medical records. The incident was classified as an insider breach involving EMR data. The hospital confirmed the breach after conducting a thorough investigation.

Who Is Affected

516 patients who received care at Weill Cornell Medicine are affected by this breach. Their electronic medical records were subject to unauthorized access or disclosure by an insider with access to the hospital's EMR system.

Why It Matters

This incident highlights ongoing vulnerabilities in healthcare organizations where authorized personnel can misuse their access to sensitive patient information. Insider threats remain a significant challenge for medical institutions that maintain large volumes of highly personal health data, as employees with legitimate system access can compromise patient privacy.

AI-Assisted

Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.

Weill Cornell Medicine discloses an insider data breach: On February 23, HHS... — Industry | PrivacyWire