The New York Blood Center (NYBC) experienced a ransomware attack leading to the disruption of its operations, including the rescheduling of appointments. While the center continues to accept blood donations, processing times may be delayed. The attack's timing exacerbated the already critical situation due to a recent blood emergency declared following a decline in donations and a rise in COVID cases. There has been no confirmation about the exfiltration of sensitive data, and restoration efforts for affected systems are ongoing without a specified timeline for full recovery.

In January 2025, New York Blood Center Enterprises (NYBCe) suffered a data breach exposing the personal and sensitive information of 193,822 individuals. The compromised data included names, Social Security numbers, state-issued IDs (e.g., driver’s licenses), bank account details (for direct deposit participants), health information, and test results. An unauthorized party accessed NYBCe’s network between January 20–26, 2025, acquiring copies of internal files. While no cybercriminal group has publicly claimed responsibility, the breach forced NYBCe to take immediate containment measures to mitigate disruption to critical blood and medical services. The organization is offering affected individuals free credit and identity monitoring via Experian. The incident ranks as the fourth-largest healthcare breach of 2025 in the U.S. by records compromised. NYBCe, a nonprofit serving over 75 million patients across 600+ hospitals, did not disclose whether ransomware was involved or if a ransom was paid.

New York Blood Center, one of the largest independent blood centers in the U.S. serving over 75 million people, suffered a ransomware attack in January 2024. Hackers accessed its network between January 20 and 26, exfiltrating sensitive data before deploying ransomware. The breach compromised patient data (names, health information, test results) and employee information (Social Security numbers, driver’s licenses, government IDs, and financial account details for current/former staff). Over 10,557 Texas residents were confirmed affected, though total victim counts remain undisclosed. The organization, which supplies ~4,000 blood units daily to 400+ hospitals, also had clinical data tied to services like apheresis, cell therapy, and diagnostic testing exposed. The attack disrupted operations, required a months-long investigation (concluded June 30), and triggered regulatory notifications. The incident aligns with a broader trend of ransomware targeting blood service providers, including OneBlood and Synnovis.