Genomics testing lab notifies nearly 310,000 of hack. Baylor Genetics Among the Latest Medical Labs, Bio-Tech Firms Attacked Marianne Kolbasuk McGee (HealthInfoSec) - August 20, 2026 Genomics testing firm Baylor Genetics is notifying nearly 310,000 people and counting about a June hack that compromised sensitive patient information including test results and employee data. The incident is the latest in a rash of attacks hitting medical laboratories, biotech and life sciences firms. Baylor Genetics has so far reported to several state attorneys general that nearly 250,000 Texans were affected, as well as nearly 57,000 citizens in Massachusetts and more than 2,600 residents of Vermont. Baylor Genetics in a breach notice said that it discovered suspicious activity on a limited portion of its IT environment around June 15. An investigation into the incident determined that a threat actor accessed portions of Baylor Genetics' network and certain stored data between June 11 and June 17. Patient information potentially compromised varied by individual but may have included names, date of birth, medical testing information, laboratory test results, health insurance information, as well as Social Security number for a limited subset of individuals. For current or former employees, the information potentially affected may have included personal identifying information such as Social Security numbers, government-issued identification numbers and financial account information. "At this time, Baylor Genetics is not aware of any confirmed identity theft, fraud or misuse of personal information related to this incident," the company said. No cybercrime groups have surfaced on the darkweb claiming responsibility for the incident. As its name implies, Baylor Genetics provides genetic testing and diagnostic services, including genomic sequencing, to uncover conditions related to rare diseases, pediatric genetics, reproductive health, hereditary cancer, metabolic disorders and other issues. The company's roots trace to 1978 when two physician-scientists founded the department of molecular and human genetics at Baylor College of Medicine. By 1996, the company was selected as one of six pilot sites for the final phases of the Human Genome Project, a research endeavor that has led to modern-day genomics discoveries. Baylor Genetics did not immediately respond to ISMG's request for additional details pertaining to its hacking incident. The Baylor Genetics breach report comes on the heels of hacks on other medical laboratories, bio tech companies and med tech firms in recent weeks and months. Similar breaches. Other recent hacks include the theft of data from clinical testing laboratory and medical device maker Abbott Laboratories and its cancer diagnostics business Exact Sciences. Cybercrime gang ShinyHunters and another gang, ShadowByt3$, each claimed to steal data - including artificial intelligence models - from Abbott's Exact Sciences unit (see: Craneware, Abbott Probe Separate Health Data Theft Incidents). Also, cybercrime gang FulcrumSec in recent weeks claimed it leaked on its darkweb site two large caches of data the group claims it stole in a June attack on Novo Nordisk. The latest data dump allegedly includes the Danish drug maker's "complete enterprise Hugging Face AI and machine learning ecosystem" (see: Extortion Gang Leaks Novo Nordisk 'AI and ML Ecosystem'). In addition to FulcrumSec's claims, in June, a second hacker group, TheUSERS007, told Databreaches.net that it also stole "crown jewel" data - including AI models - from the maker of popular diabetes and weight loss treatment drugs Ozempic and Wegovy. While healthcare sector entities have long been targeted by hackers, life sciences, medical testing and biotech companies and other such sectors are especially attractive targets for cybercriminals, some experts said. "These organizations hold an unusually valuable combination of sensitive health information, personally identifiable information and, in some cases, proprietary research and intellectual property," said Dave Bailey, vice president of solutions and strategy at healthcare privacy and security consultancy Clearwater. "Genomic information is especially sensitive because, unlike a password or credit card number, it is inherently permanent. You cannot change your DNA after a breach." There could be several reasons for the apparent recent focus by cybercriminals on life- and bio-science firms, said Mike Hamilton, CISO emeritus at IT services firm Datec, Inc. "First, they are regulated as a covered entity, and unauthorized disclosure of records brings regulatory action. Additionally, they house sensitive privacy and health information, and our privacy laws facilitate class action when those records are stolen," he said. "Both of those facts give criminals substantial leverage when negotiating extortion demands." Hamilton said it's unlikely that the kind of genetic testing information potentially stolen in the Baylor Genetics hack or similar incidents will be monetized by selling it on the darkweb, "although it may be interesting to some nation states that routinely steal research from American companies." Apart from the threat of regulatory action and civil litigation, hackers also pose additional risk to the integrity of the information compromised, he said. "If it can be stolen, it can be changed. This puts the victim organizations in an even worse position, unable to trust the veracity of their own data - which could have life-safety impacts," he said. "Again, this gives the criminal organization a great deal of leverage." Organizations such as life sciences, medical labs and biotech companies should identify their most sensitive data and systems and apply protections commensurate with the consequences if those assets are compromised, Bailey said. "That means strong segmentation, least-privilege access, phishing-resistant multifactor authentication, encryption, rigorous third-party access controls and continuous monitoring for unusual access or data movement." Meanwhile, AI in the hands of hackers raises the stakes for these companies because it enables attackers to create more convincing phishing and social-engineering campaigns and operate at greater speed and scale, he said. "Organizations should increasingly assume that credentials may eventually be compromised and build controls that prevent one compromised identity from becoming unrestricted access to sensitive data," he said. "Just as importantly, they should regularly test their ability to detect, contain and recover from an attack rather than relying solely on preventative controls."

Exact Sciences - 10,869,543 breached accounts. August 7, 2026 In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone numbers and health records. Abbott subsequently published a public notice advising that "some of the impacted files contain personal information and/or personal health information" and that more specific information would follow once their review of the incident was complete. For context, Exact Sciences is the maker of the Cologuard at-home colorectal cancer screening test.

Patient sues Abbott Labs, Exact Sciences in Data Theft. Class Action Suit Claims Labs Failed to Safeguard Data in ShinyHunters Hack Marianne Kolbasuk McGee (HealthInfoSec) - July 24, 2026 The first of what could be many more proposed class action lawsuits has been filed in a U.S. federal court against clinical testing laboratory and medical device maker Abbott Laboratories and its cancer diagnostics business Exact Sciences in the wake of a data theft hack claimed last week by notorious cybercrime gang ShinyHunters. The lawsuit filed in an Illinois federal court alleges, among other claims, that the Illinois-based Abbott and its Exact Sciences business - which provides cancer screenings, diagnostic testing, and related laboratory services to patients and healthcare providers in the United States - failed to implement "necessary data security safeguards" to protect the plaintiff's and class members' sensitive personal and health information from unauthorized access and theft by cybercriminals. "The data breach and the injuries it caused to plaintiff and class members occurred as direct, proximate and foreseeable results of multiple failings on the part of defendants," alleges the lawsuit filed on Wednesday by Brian Troesch - a patient of Exact Sciences, on behalf of himself and other individuals similar situated. "This failure resulted in cybercriminals accessing the private information of defendants' current and former patients." The lawsuit is seeking monetary damages as well as injunctive relief requiring Abbott and Exact Sciences to strengthen their data security systems and monitoring procedures and conduct periodic audits of those IT systems. In addition, the lawsuit wants Abbott to provide "lifetime credit monitoring and identity theft insurance to plaintiff and class members." Abbott Labs in a July 16 statement posted on its website acknowledged it's investigating a breach involving its Exact Sciences business. Abbott said the incident appears to involve unauthorized access to a limited number of internal systems in the company's Cancer Diagnostics business only (see: Craneware, Abbott Probe Separate Health Data Theft Incidents). "This does not impact any business operations, product or product availability, manufacturing or lab operations, or our ability to serve patients," the company said. "There is no impact to any other Abbott businesses, sites or systems. The legacy Exact Sciences systems are separate from Abbott's." But the Exact Sciences incident is not the only alleged hack Abbott confirmed it's investigating. The company in a statement to ISMG on Monday acknowledged that the company is also investigating claims that another threat actor gained access to Abbott's LabCentral portal. Cybercrime gang ShadowByt3$ claimed to media outlet Bleeping Computer this week to have exfiltrated an array of manufacturing certificates, operation manuals, technical specifications, regulatory documentation, product requirement archives, calibrator value assignments, assay files and other product documentation related to Abbott's laboratory diagnostic systems. ShinyHunters on its dark website on Friday still listed "Abbott-owned Exact Sciences" as a victim, indicating that it had extended until July 21 its threat for the company to "pay or leak." "We have made an extension to your deadline. We are issuing one last final warning due to the severity of this case. You wouldn't want us to describe what was exfiltrated from you publicly," ShinyHunters wrote. As of Friday, which was three days after that supposed final deadline, ShinyHunters had appeared to not yet begin leaking Abbott's data. Abbott on Friday declined further comment to ISMG on either cyber incident, ShinyHunter's latest threats or the proposed class action lawsuit filed by Troesch.