2.8 million people affected by data breach at Baylor Genetics testing and diagnostic firm

In a security update posted on its website earlier this week, the company said it spotted the intrusion in a “limited portion” of its IT environment on or around June 15. Subsequent investigation determined that both patients and employees have had their data stolen, including those who are not working at Baylor anymore.

What happened

Subsequent investigation determined that both patients and employees have had their data stolen, including those who are not working at Baylor anymore.

Where the sources line up

For patients, crooks stole names, dates of birth, medical testing information, laboratory test results, and “potentially health insurance information, as well as Social Security number”. SSNs, Baylor Genetics stressed, were taken from a “very limited subset of patients”.

Practical impact for readers

Regardless, fraudsters who know the details about medical testing and lab results have more than enough information to launch highly sophisticated, personalized phishing attacks that can lead to ransomware infections, business email compromise, and more.

Who should pay attention now

For certain current and former employees, the attackers nabbed Social Security numbers, government-issued identification numbers, and financial account information, ideal for wire fraud.

What is still unclear

US healthcare software giant Unlimited Technology Systems admits hackers may have stolen sensitive data of 3. 8 million people Healthtech firm CareCloud reveals March 2026 data breach impacted 3. 7 million patients 2. 6 million DentaQuest accounts exposed by data breach – ShinyHunters claim 234GB of data stolen In the security update, the company did not discuss the identity of the attackers, or the number of affected individuals. However, in a separate report filed with the US Department of Health and Human Services, Baylor reported the number of victims as 2,810,878. It added that at the time of publication, there was no evidence of confirmed identity theft , fraud, or misuse of personal information stolen in the attack.

Source notes

TechRadar