Ransomware attack at blood center: Org tells users their data’s been stolen

A ransomware attack targeted the New York Blood Center (NYBC), which began sending data breach notifications to its users after the incident. The attack was first noticed on 26 January 2025, and victims are only now being notified as investigations continue. NYBC publicly acknowledged the scale of the incident but has not issued a precise number of affected people; based on regulator documents, hackers could have stolen information belonging to at least tens of thousands of people.

The NYBC serves over 75 million people across more than 17 states and delivers about one million lifesaving blood products annually. NYBC Enterprises said some clinical information used in diagnostic testing was also accessed by the attackers during the cyber incident. So far, it is unknown which ransomware group might be behind the attack, and there have been no threats to publish or sell the data, though this could change as ransom negotiations proceed. according to New York Blood Center Enterprises.