2026 Baylor Genetics — network intrusion Jun 11–17; patient PHI + employee PII; no total census yet
Data compromised
Patients: names, DOB, medical testing info, lab results, health insurance (subset with SSNs). Employees: SSNs, government IDs, financial account info. Test result integrity not affected per company.
Technical writeup
Verified company notice — August 2026. Baylor Genetics (Houston clinical genomics laboratory) identified suspicious activity on or around June 15, 2026, secured systems, and determined an unauthorized third party accessed certain network data between June 11 and June 17, 2026. A review completed on or about July 30, 2026 identified potentially affected patients and current/former employees. For patients, fields may include names, dates of birth, medical testing information, laboratory test results, health insurance information, and Social Security numbers for a very limited subset. For employees: SSNs, government-issued IDs, and financial account information. Baylor Genetics states laboratory operations continued, genetic test results were not altered, and no confirmed misuse at indexing. Rhode Island AG notice cites approximately 4,532 Rhode Island residents potentially impacted; company had not published a nationwide census or HHS 500+ portal entry at indexing — recordsAffected 0 pending OCR/company attestation.
Root cause
Unauthorized third party accessed portions of Baylor Genetics network Jun 11–17, 2026; discovered Jun 15; review completed Jul 30
References
- https://www.baylorgenetics.com/securityupdate/
- https://www.claimdepot.com/data-breach/baylor-genetics-2026
- https://www.hipaajournal.com/baylor-genetics-data-breach/
- https://www.cybersecuritydive.com/news/baylor-genetics-data-breach/758123/
- https://www.medtechdive.com/news/baylor-genetics-cybersecurity-incident/758456/