Patients who underwent genetic testing through Baylor Genetics are being notified after a cybersecurity incident exposed sensitive personal and medical information. Cybersecurity experts warn it could be particularly problematic because the affected people have undergone or are undergoing in vitro fertilization (IVF). Baylor Genetics disclosed that it identified suspicious activity within a limited portion of its information technology environment in June and later determined that an unauthorized third party had accessed parts of its network between June 11 and June 17.
According to the company's security notice, a review completed on July 30 found that certain patient and employee information may have been exposed, including laboratory test results, health insurance data, and, for some individuals, Social Security numbers. "Upon identifying the incident, we immediately secured our systems, engaged leading independent cybersecurity and forensic specialists, notified law enforcement, and implemented additional security measures," Jason Maloni, a spokesperson for Baylor Genetics, told Newsweek. Baylor Genetics said it discovered suspicious activity on or around June 15 and immediately launched an investigation with outside cybersecurity and digital forensic specialists.
The investigation concluded that an unauthorized third party accessed portions of the company's network and certain data stored on it between June 11 and June 17. The company said laboratory operations continued without interruption throughout the incident and that its ability to provide genetic testing services was not affected. The company sent letters to people who may have been affected this week, informing them of the breach and steps they should take to protect themselves.
People who received the letter were encouraged to place a fraud alert on their Social Security number and use credit freezes to ensure no one could use their Social Security number if it was compromised. "We are pleased to say that our systems are operational, our environment is secure, and our important work with all stakeholders continues as usual," Maloni said. Baylor Genetics said it is not currently aware of any confirmed identity theft, fraud, or misuse of personal information linked to the incident.
It's unclear how many people may have had their information leaked, but Baylor Genetics has performed millions of tests. The breach could pose risks beyond traditional identity theft because fertility and genetic-testing information can give criminals personal context that makes scams more convincing. David de Paula Santos Silva, founder and CEO of CyberX, said attackers could use information about fertility treatment to craft highly targeted fraud attempts.
That includes impersonating fertility clinics, genetic testing providers, insurance companies or embryo storage providers. They could claim that an urgent payment is required to continue treatment, release test results or maintain embryo storage. "IVF also makes this particularly sensitive because people may already be dealing with significant emotional pressure, costs and strict treatment timelines.
Extract — continue reading at the source.
