Baylor Genetics recently confirmed a cyberattack that compromised sensitive patient and employee data. The intrusion occurred over a one-week period in June, exposing birthdates, medical test results, and health insurance records. In a limited number of instances, attackers gained access to Social Security numbers as well.
The company stated that its investigation concluded on July 30. While Baylor Genetics reports no confirmed instances of identity theft or fraud at this time, the breach highlights the ongoing vulnerability of medical data within the supply chain. The firm has since taken steps to improve its identity and access management processes.
This incident adds to a series of recent cyberattacks targeting healthcare vendors. Because these companies manage large volumes of private information, they are prime targets for malicious actors. Unlike hospitals or clinics that often receive significant regulatory attention, these vendors frequently remain overlooked in broader security discussions.
Baylor Genetics is working with law enforcement and third-party security experts to manage the fallout. While the company stated that hackers did not modify patient test results, the exposure of personal records remains a significant concern for those impacted. Individuals whose data was involved in the breach are being notified directly as part of the remediation process.