Loading story…
Baylor Genetics disclosed a data security incident affecting nearly 250,000 individuals after detecting unauthorized activity in parts of its internal network. The company said an unauthorized third party accessed portions of its network and stored data between June 11 and June 17, 2026, with the intrusion discovered on June 15 during that window. Baylor Genetics reported 248,430 affected individuals to Texas regulators and notified law enforcement as it investigated the breach.
The exposed information included sensitive personal, medical, insurance, and Social Security data, while some current and former employees also had government identification and financial account information compromised. Baylor Genetics said it has secured affected systems and strengthened security controls following the incident, and reported that it had not identified misuse of the stolen information at the time of disclosure. No threat actor had publicly claimed responsibility.
See attribution, scope, and your downstream exposure.
5 events from the most recent confirmed update back to the earliest known activity.
Baylor Genetics said it completed a detailed review of the data and individuals potentially affected by the incident on July 30, 2026. The review followed the June network intrusion investigation conducted with outside cybersecurity and digital forensics specialists.
Baylor Genetics said its investigation determined the unauthorized third party's access to parts of its network and stored data continued until June 17, 2026.
On June 15, 2026, Baylor Genetics identified unauthorized activity within portions of its internal network. The company then launched an investigation with external cybersecurity experts, took containment steps, and notified law enforcement.
Baylor Genetics said an unauthorized third party accessed portions of its network and data stored on it beginning on June 11, 2026. The intrusion window later identified by the company ran from June 11 through June 17, 2026.
Baylor Genetics disclosed a data security incident affecting at least 248,430 individuals and reported it to Texas regulators. The company said exposed data included personal, medical, insurance, and Social Security information, with some employee records also including government ID and financial account data.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
3 references tracked. Mallory keeps watching after this page renders.
cyberveille.ch
Open sourceteiss.co.uk
Open sourcebaylorgenetics.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Baylor Genetics disclosed that unauthorized actors accessed portions of its network between **June 11 and June 17, 2026**, affecting approximately **2,810,878** patients and employees. The U.S. clinical diagnostic laboratory detected suspicious activity around June 15 and completed its review of the incident’s data impact around July 30. Exposed information may include personal identifiers, medical testing information, laboratory results, health-insurance data and, in limited cases, Social Security numbers. Employee records may also have contained government identification and financial-account information. Baylor Genetics said laboratory and genetic-testing operations continued without interruption, no test results were altered, and it has found no confirmed fraud or misuse; no threat actor has publicly claimed responsibility.
Sep 7, 2026
Nacogdoches Memorial Hospital, an independent health system in Texas, disclosed a cyberattack that exposed sensitive information belonging to **257,073 individuals**. The hospital said staff identified an ongoing intrusion on January 31, while a filing to Maine indicated the incident date was January 15, creating some uncertainty around the precise timeline of the breach. The compromised data may include names, contact information, **Social Security numbers**, dates of birth, medical record numbers, account numbers, health plan beneficiary numbers, and in some cases full-face photographs. Reporting indicated the incident had not yet appeared on the U.S. Department of Health and Human Services public breach portal at the time of disclosure, and it remained unclear whether the total affected population included only patients or also employees.
Jun 29, 2026
Brown Health Medical Group-MA disclosed a data breach affecting **311,760 individuals** after unauthorized activity was discovered on a legacy file server at its Hawthorn location in December 2025. The organization said the intrusion was limited to that historic file server and did **not** affect its electronic medical record or electronic health record systems, but a June 22, 2026 review found that files on the server had been accessed. The exposed information potentially included names, contact details, dates of birth, Social Security numbers, driver’s license and other government ID numbers, medical and disability records, financial account information, payment card data, and employment-related records. Brown Health Medical Group-MA reported the incident to the **HHS Office for Civil Rights** and state authorities in Massachusetts and Vermont, said no threat actor had been publicly identified or linked to a ransomware or extortion claim, and is offering affected individuals **24 months** of credit monitoring, fraud detection, and identity theft protection services.
Aug 6, 2026