News Summary
The New York Blood Center is facing two proposed class-action lawsuits following a significant data breach that compromised the personal information of nearly 194,000 blood donors. The lawsuits allege inadequate protection of donor data and delay in notifying affected individuals. Plaintiffs are seeking remedies, including credit monitoring and penalties against the non-profit. The breach, linked to a cyberattack, raises concerns about identity theft and highlights the healthcare sector’s vulnerability to cyber threats. As the situation evolves, both the plaintiffs and NYBCe navigate complex legal challenges.
New York – The New York Blood Center (NYBCe) is currently facing two proposed class-action lawsuits following a January data breach that compromised the personal information of nearly 194,000 blood donors nationwide. The lawsuits are primarily centered around accusations that NYBCe failed to adequately protect donor data and did not promptly notify affected individuals about the breach.
The legal filings claim that NYBCe’s security measures were insufficient to safeguard sensitive donor information, which includes social security numbers, demographic data, and medical details acquired during donor screenings, as well as results from infectious disease tests. Plaintiffs in the case include individuals from Illinois and Connecticut who have sought judicial approval to certify the class-action lawsuits. They are requesting remedies such as up to 10 years of credit monitoring for those impacted and monetary penalties against NYBCe.
The data breach was traced back to a cyberattack that occurred in late January, allowing hackers to access and copy personal information from affected donors. NYBCe reportedly delayed notifying the donors about the data breach for over seven months, intensifying concerns about potential identity theft and financial harm.
In light of the growing urgency surrounding cybersecurity in the health care sector, which has become a prime target for cybercriminals, state regulations have also started to adapt. New York’s Governor Kathy Hochul has implemented rules that require hospitals to report data breaches within 72 hours. However, these regulations do not extend to the entire health care industry, potentially leaving loopholes for nonprofits like NYBCe.
Despite the breach, NYBCe stated that it took immediate action to contain the cybersecurity threat and ensure service continuity throughout the investigation. The nonprofit, which earns approximately $600 million in annual revenue, plays a critical role in providing transfusion services to over 400 hospitals nationwide and collects about 4,000 units of blood products daily.
In a separate incident, NYBCe experienced a ransomware attack in January 2025 that led to the cancellation of appointments and blood drives, further stating that hackers disrupted its network. Although the organization acknowledged this attack, it did not specify if a ransom was demanded. Following the breach, NYBCe began offering affected individuals free credit and identity monitoring services through Experian.
Amid these ongoing challenges, NYBCe has struggled with blood shortages, even declaring a blood emergency prior to these cyber incidents. Ransomware attacks have been increasingly prevalent, with a reported 4,634 incidents globally in 2024, underscoring the vulnerability of medical nonprofits and the sensitive nature of their operations. In light of these circumstances, NYBCe’s obligation to protect donor data is under scrutiny, as both the health of individuals and the integrity of critical services are at stake.
As the lawsuits unfold, both plaintiffs and the New York Blood Center will look to navigate this complex issue, addressing not only the immediate repercussions of the breach but also establishing stronger safeguards to protect sensitive data from future intrusions.
Deeper Dive: News & Info About This Topic
HERE Resources
Small Business Owners in NYC Demand Action on Regulations
Empire Cannabis Club Challenges NY Cannabis Regulations
Barclay Damon Launches National Pharmacy Team
New York’s FAIR Act Revolutionizes Consumer Protection
Lawsuits Emerge Against Business Council of New York State Over Data Breach
Lawsuits Filed Against Business Council Over Data Breach
New York Proposes FAIR Business Practices Act to Protect Consumers
New York Attorney General Proposes FAIR Business Practices Act
New York’s Proposed FAIR Business Practices Act Sparks Controversy
New York Lawmakers Push for FAIR Business Practices Act
Additional Resources
- Crain’s New York: New York Blood Center Faces Lawsuits Over Cyberattack
- Cybernews: New York Blood Center Confirms It Notified 194K People of Data Breach
- TechTarget: New York Blood Center Discloses Data Breach
- Wikipedia: Cyber Attack
- Encyclopedia Britannica: Cybersecurity
Author: STAFF HERE NEW YORK WRITER
NEW YORK STAFF WRITER The NEW YORK STAFF WRITER represents the experienced team at HERENewYork.com, your go-to source for actionable local news and information in New York, the five boroughs, and beyond. Specializing in "news you can use," we cover essential topics like product reviews for personal and business needs, local business directories, politics, real estate trends, neighborhood insights, and state news affecting the area—with deep expertise drawn from years of dedicated reporting and strong community input, including local press releases and business updates. We deliver top reporting on high-value events such as New York Fashion Week, Macy's Thanksgiving Day Parade, and Tribeca Film Festival. Our coverage extends to key organizations like the Greater New York Chamber of Commerce and United Way of New York, plus leading businesses in finance and media that power the local economy such as JPMorgan Chase, Goldman Sachs, and Bloomberg. As part of the broader HERE network, including HEREBuffalo.com, we provide comprehensive, credible insights into New York's dynamic landscape.
