Analysis conducted by the Attorney General’s office revealed that the exposed information consisted overwhelmingly of social security numbers and financial account information and surmised that hacking and inadvertent disclosure were the two leading causes of data security breaches.
In the OAG’s 2014 report, hacking similarly represented the leading cause of all data breaches from 2006 to 2013.
While 2016 saw a 59% increase in the total number of reported breaches, only two mega-breaches figured among them.
On October 12, 2016, Newkirk Products, Inc., a business associate of Capital District Physicians’ Health Plan, Inc., CDPHP Universal Benefits, Inc., and Capital District Physicians’ Healthcare Network, Inc., reported exposing the personal health information of 761,782 New Yorkers.
The number of New Yorkers affected steadily declined in the months that followed.