Diagnostic genomics company Baylor Genetics revealed that it was the target of a cyber attack that compromised sensitive patient and employee information. The incident occurred between June 11 and 17, according to an official statement released on August 14. The intrusion was detected in early summer and an in-depth investigation was completed on July 30.
Break-in details and incident timeline
Baylor Genetics identified unusual activity in a restricted part of its information technology environment in early summer. Following detection, an investigation confirmed that an unauthorized third party had access to certain sections of the network and data stored on it during the period June 11-17. The full analysis of what information was obtained took time, being completed on July 30, when the extent of the breach was confirmed.
Full coverage: Latest News (EN)
Patient Information Hit by Data Breach
The company found that compromised patient data varied considerably. In some cases, the breach included personal information considered sensitive, which raises significant privacy concerns.
- Date of birth
- Details about medical examinations
- Laboratory test results
- Potentially, health insurance information
- Social Security numbers (for a very limited subset of patients)
Current and former employee data exposed
The cybersecurity breach was not restricted to patients; Current and former Baylor Genetics employees were also affected. Compromised information in this category may have included critical personal details such as Social Security numbers, government-issued identification documents, and financial account data, increasing the scope of the incident.
Company Stocks and What Baylor Genetics Does
The company has already started the individual notification process for people potentially affected by the incident. Despite the seriousness of the situation, Baylor Genetics reported that, to date, it is not aware of any identity theft, fraud or confirmed misuse of exposed personal information. Baylor Genetics specializes in whole-genome and whole-exome sequencing testing, targeted panels and specialized assays, and is a key player in the diagnostic genomics industry.
Cyberattacks grow in the medical technology sector
The incident at Baylor Genetics reflects a worrying trend of increasing cyberattacks in the life sciences and medical technology sector. Several renowned companies have been the target of invasions this year, highlighting the vulnerability of the sector.
- Medtronic
- iRhythm
- Stryker
- New Nordisk
- Amgen
The recurrence of these events raises alerts about data security in a sector that deals with extremely sensitive and high-value information for cybercriminals, requiring greater investment in protection.