2.8 million people affected by data breach at Baylor Genetics testing and diagnostic firm


Baylor Genetics, a US-based clinical diagnostic laboratory, suffered a cyberattack in which it lost sensitive data on 2.8 million people – both patients and employees.

In a security update posted on its website earlier this week, the company said it spotted the intrusion in a “limited portion” of its IT environment on or around June 15. Subsequent investigation determined that both patients and employees have had their data stolen, including those who are not working at Baylor anymore.

For patients, crooks stole names, dates of birth, medical testing information, laboratory test results, and “potentially health insurance information, as well as Social Security number”. SSNs, Baylor Genetics stressed, were taken from a “very limited subset of patients”.

Read more…
Source:  Tech Radar News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Maryland Air National Guard conduct first-ever defensive cyber training on base network

    February 16, 2022

    MIDDLE RIVER, MD — Members of the 275th Cyberspace Operations Squadron, Maryland Air National Guard, conducted one of the first-ever enduring defensive cyber training missions in a Title 32 mobilization status on an installation’s network, at Warfield Air National Guard Base, Maryland, Nov. 16-19, 2021. “This training is a very unique opportunity and it is the ...

  • Tripwire for real war? Cyber’s fuzzy rules of engagement

    February 14, 2022

    President Joe Biden couldn’t have been more blunt about the risks of cyberattacks spinning out of control. “If we end up in a war, a real shooting war with a major power, it’s going to be as a consequence of a cyber breach of great consequence,” he told his intelligence brain trust in July. Now tensions ...

  • CIA illegally harvested US citizens’ data, senators assert

    February 11, 2022

    Two US senators have gone public with evidence of what they assert is a previously secret bulk data collection effort by the Central Intelligence Agency (CIA), conducted outside the law and without oversight. Democratic Senators Ron Wyden and Martin Heinrich, of Oregon and New Mexico respectively, on Thursday announced that in April 2021 they sent a ...

  • A sign of ransomware growth: Gangs now arbitrate disputes

    February 9, 2022

    Cyber criminal gangs are getting increasingly adept at hacking and becoming more professional, even setting up an arbitration system to resolve payment disputes among themselves, according to a new report by the United States, Australia and the United Kingdom that paints a bleak picture of ransomware trends. Ransomware gangs, which hack targets and hold their data ...

  • North Korea Hacked Him. So He Took Down Its Internet

    February 2, 2022

    For the past two weeks, observers of North Korea’s strange and tightly restricted corner of the internet began to notice that the country seemed to be dealing with some serious connectivity problems. On several different days, practically all of its websites—the notoriously isolated nation only has a few dozen—intermittently dropped offline en masse, from the ...

  • Iranian APT MuddyWater targets Turkish users via malicious PDFs, executables

    January 31, 2022

    MuddyWater has conducted various campaigns against entities spread throughout the U.S.A, Europe, Middle East and South Asia. A typical TTP employed by the group is the heavy use of scripting in their infection chains using languages like PowerShell and Visual Basic coupled with the frequent use of living-off-the-land binaries (LoLBins). Cisco Talos recently observed a campaign operated ...