Loading story…
Baylor Genetics disclosed that unauthorized actors accessed portions of its network between June 11 and June 17, 2026, affecting approximately 2,810,878 patients and employees. The U.S. clinical diagnostic laboratory detected suspicious activity around June 15 and completed its review of the incident’s data impact around July 30.
Exposed information may include personal identifiers, medical testing information, laboratory results, health-insurance data and, in limited cases, Social Security numbers. Employee records may also have contained government identification and financial-account information. Baylor Genetics said laboratory and genetic-testing operations continued without interruption, no test results were altered, and it has found no confirmed fraud or misuse; no threat actor has publicly claimed responsibility.
See attribution, scope, and your downstream exposure.
7 events from the most recent confirmed update back to the earliest known activity.
Baylor Genetics completed its review of the potentially affected data and individuals on or about July 30. The review found that exposed records could include patient medical and insurance data and, for some patients and employees, Social Security numbers and other sensitive identifiers.
Baylor Genetics detected suspicious activity in a limited part of its IT environment around June 15 and began investigating the intrusion with external cybersecurity specialists.
An unauthorized third party accessed portions of Baylor Genetics' network between June 11 and June 17, potentially exposing patient and current or former employee information.
Following the incident, Baylor Genetics secured affected systems, strengthened identity and access controls, enhanced monitoring, and coordinated its response with law enforcement and regulators.
Baylor Genetics reported 2,810,878 affected individuals to the U.S. Department of Health and Human Services following the cyberattack.
An initial filing with a Texas state regulator reported that at least 248,430 Texas residents were affected by the Baylor Genetics data-security incident.
Baylor Genetics sent written notifications to affected individuals when it had available address information and established an assistance line for those impacted.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
4 references tracked. Mallory keeps watching after this page renders.
teiss.co.uk
Open sourcecysecurity.news
Open sourcescworld.com
Open sourcetechradar.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Baylor Genetics disclosed a data security incident affecting nearly 250,000 individuals after detecting unauthorized activity in parts of its internal network. The company said an unauthorized third party accessed portions of its network and stored data between **June 11 and June 17, 2026**, with the intrusion discovered on **June 15** during that window. Baylor Genetics reported **248,430** affected individuals to Texas regulators and notified law enforcement as it investigated the breach. The exposed information included sensitive personal, medical, insurance, and **Social Security** data, while some current and former employees also had government identification and financial account information compromised. Baylor Genetics said it has secured affected systems and strengthened security controls following the incident, and reported that it had not identified misuse of the stolen information at the time of disclosure. No threat actor had publicly claimed responsibility.
Aug 25, 2026
Nacogdoches Memorial Hospital, an independent health system in Texas, disclosed a cyberattack that exposed sensitive information belonging to **257,073 individuals**. The hospital said staff identified an ongoing intrusion on January 31, while a filing to Maine indicated the incident date was January 15, creating some uncertainty around the precise timeline of the breach. The compromised data may include names, contact information, **Social Security numbers**, dates of birth, medical record numbers, account numbers, health plan beneficiary numbers, and in some cases full-face photographs. Reporting indicated the incident had not yet appeared on the U.S. Department of Health and Human Services public breach portal at the time of disclosure, and it remained unclear whether the total affected population included only patients or also employees.
Jun 29, 2026
The University of Hawaiʻi confirmed that a **ransomware attack** against the UH Cancer Center’s **Epidemiology Division** led to the theft of sensitive data affecting up to **~1.2 million individuals**. The intrusion occurred in **August 2025**, and the university began issuing notifications in late February, including letters to **87,493** participants in the *Multiethnic Cohort (MEC) Study* and additional outreach tied to roughly **900,000** discovered email addresses. UH stated the incident did **not** impact Cancer Center clinical trials operations, patient care, other Cancer Center divisions, or UH student records. Disclosed exposed data includes research and registry-related files containing **names and Social Security numbers**, and in some cases **driver’s license numbers** and **health information** associated with the MEC Study (1993–1996) and other diet/cancer studies, as well as historical datasets sourced from state transportation and voter registration records (late 1990s/2000s). Reporting also indicates the affected records include SSN identifiers from historical driver’s license and voter registration data, expanding the potential impacted population beyond the MEC cohort to approximately **1.15 million** additional individuals whose information may have been present in those datasets.
Jun 29, 2026