NYC Health + Hospitals says hackers accessed and stole personal and medical information, along with biometric data, in a breach affecting at least 1.8 million people. The public healthcare system describes the incident as one of the largest breaches recorded in 2026. According to the disclosures reported across outlets, the stolen data includes identifiers and medical records, as well as biometric scans such as fingerprints, and the organization also indicates that related biometric information may include other scan types (with at least fingerprints explicitly cited). NYC Health + Hospitals reports that it has informed the US Department of Health and Human Services about the breach. The affected scale—at least 1.8 million individuals—makes the incident notable among recent health-sector cyberattacks. The reporting emphasizes the presence of biometric information among the data taken, which would make the compromise difficult to reverse compared with information that can be changed. No details are provided in the sources shared here about when the breach occurred, who is responsible, or what steps are being taken beyond the initial disclosure and reporting.