Yale New Haven Health data may have been compromised in Elekta breach

NEW HAVEN — Yale New Haven Health officials said Friday some patients’ personal data — including financial information and social security numbers — may have been compromised as part of the Elekta data breach.

The software company provides data storage for the hospital’s health system.

In a statement, Yale New Haven Health said Elekta was breached between April 2 and April 20 of this year. The breach affected 40 of the company’s clients— Yale New Haven Health among them.

The hospital was notified on May 26 “of the access to its patient data,” the statement said.

After learning of the breach, the hospital system “undertook an extensive internal investigation” to determine what information had been exposed and who was affected.

“Certain demographic information such as names, addresses, phone numbers, emails, Social Security numbers, treatment locations and preferred languages were included in the Elekta databases related to the incident,” the hospital’s statement said.

Also, “a small subset of the population” may have also had their financial information exposed.

The hospital said the breach did not affect patients’ medical records.

Those who have had their information exposed will be notified by mail, and anyone whose financial information was involved “will be offered complimentary credit monitoring service,” the hospital said.

The health care system includes five hospitals— Bridgeport, Greenwich, Lawrence + Memorial, Westerly and Yale New Haven hospitals.