Attorney General James Secures $300,000 from NewYork-Presbyterian Hospital for Failing to Protect Patient Data

New York Attorney General Letitia James secured a $300,000 settlement with NewYork-Presbyterian after an investigation found that third‑party tracking tools on the hospital’s website transmitted visitors’ protected health information (including search terms and, in some cases, personal identifiers) to external companies between June 2016 and June 2022. The hospital disabled trackers after reporting, confirmed the incident affected over 54,000 people, and agreed to implement policies, audits, contractual reviews, and deletion of improperly shared data to prevent future disclosures.