CaraComp
CARACOMP DEEP DIVE

Biometric Digital ID Explained: Fingerprint Data Breach: Prints You Can Never Change

Biometric Digital ID Security: One

October 21, 2026•4:18•Watch on YouTube →
Biometric Digital ID Explained: Fingerprint Data Breach: Prints You Can Never Change
Chapter 1 of 10 · At Least 1.8 Million
0:00 / 4:18

Full Transcript

A total stranger could have your fingerprints for the rest of your life. Hackers spent months inside the computers at New York City's public hospitals. They copied people's files, and some of those files had fingerprints in them. You can change a password. But you can never change your fingerprints. Who has your fingerprints on file tonight? Here's how you can limit who keeps yours.

At Least 1.8 Million ▶ 0:00

At least 1.8 million people had their information taken. And nobody can grow new fingers.

TechCrunch reported the break-in on May 18, 2026. Reports say the hackers got in through an outside company the hospitals worked with. Then the hackers started copying files.

The hackers got in around November 25, 2025. And nobody noticed them for months.


Through An Outside Vendor ▶ 0:30

Each person's file had different things in it. The reports don't say whose fingerprints the hackers took. They could be staff, and they could be patients too.

The hospitals finally noticed the attack on February 2, 2026.

The hackers kept their way in until February 11, 2026. On March 24, the hospitals first told the public about the breach. The hospitals started sending letters to people in May 2026.


Spotted February 2 ▶ 0:53

Places that keep body data like fingerprints should lock it down tight. Thieves go after places that keep a lot of it.

Some files had people's insurance details and their diagnoses. Other files had their medications, their tests and their scans. Some had billing and payment records too.

Reporters sent the hospitals questions about the attack. NYC Health and Hospitals didn't explain why it kept people's fingerprints.


Diagnoses And Billing ▶ 1:16

If this helps, a like and a subscribe help us keep it coming.

The hospitals can close the hole the hackers used to get in. But nobody can give anyone new fingerprints.

Look at how many people got caught up because of one weak spot. The hackers only needed a single outside company to get in. And at least 1.8 million people had their information taken because of it. Reports still don't name that company.


One Vendor, Millions Hit ▶ 1:41

The files had two kinds of prints in them. There were fingerprints, and there were palm prints. And you can't change your palm prints either.

The stolen files also had people's Social Security numbers. Some files had people's passports, driver's licenses and exact locations.

Security Boulevard says people face a risk of fraud for the rest of their lives. If you're in those files, you'll live with that risk forever.


Passports And Licenses ▶ 2:01

Reports say the hospitals take fingerprints from people applying for jobs. They use the fingerprints for criminal background checks. Reports say those may be the prints the hackers copied.

The hackers were out of the hospitals' computers by mid-February. The hospitals can change every password. But strangers have those fingerprints for good. Nobody can ever take those prints back.

When anyone asks for your fingerprint, ask them why. If a password works, pick the password.


Out For Good ▶ 2:25

Ask them why they need your fingerprint at all. Ask them who else gets a copy of it. Ask if you can use a card or a code instead.

In India, nobody hacked anything at all. An 80-year-old woman found that her fingerprint simply stopped working.

The Wire reported that this happened to her in 2022. Her backup was a scan of her eye. But after she had cataract surgery, the eye scan failed too. She lost her food rations for most of 2023.


Nobody Hacked Her ▶ 2:47

CaraComp's write-up tells her whole story. It explains why your body makes a risky password.

You used one password for your bank and a different one for your job. If hackers got one, they still didn't have the other. You stayed protected without even thinking about it.

Open any letter about a data breach the day you get it. Freeze your credit at each of the credit bureaus. Check your credit report for accounts you didn't open.


Separate Passwords, Separate Leaks ▶ 3:10

You know it's a pain to type a 14-character password. But if it leaks, you can pick a new one the same day. You can't do that with a finger.

You can never undo a copied fingerprint. But you get to decide who gets yours next.

Tonight, make a list of every place that's taken your fingerprints. Think about your old jobs, and think about TSA PreCheck. Those are the places that have your prints.


What A Copy Means ▶ 3:36

Hackers could get into any place on that list next. Know who has your prints before the next letter comes.

Every day we take one story like this and make it simple. Subscribe and tap the bell. Tomorrow's is free too. See you in today's briefing. If this helps, a like and a subscribe help us keep it coming.

Read the Article

Biometric Digital ID Explained: Fingerprint Data Breach: Prints You Can Never Change
biometric digital id

Biometric Digital ID Explained: Fingerprint Data Breach: Prints You Can Never Change

Read the full article →