A cyberattack against New York Racing Association claimed by the Hive ransomware gang

On Monday 19th of September 2022, the Hive ransomware gang claimed responsibility for an cyberattack that impacted the IT operations of the New York Racing Association (NYRA). The incident also impacted their website availability and has resulted in member data being compromised.

On Friday 9th of September 2022, NYRA released a security breach notification that revealed that the threat actors may have exfiltrated the following member information:

• Social security numbers (SSNs)
• Driver’s license identification numbers
• Health records
• Health insurance information

The data breach notifications also include details on how to enrol for a 24-month long identity protection service through Experian, the cost for which is covered by NYRA.