← Exact Sciences (Abbott Cancer Diagnostics)

2026 Exact Sciences / Abbott Cancer Diagnostics — ShinyHunters; HIBP 10.87M emails + PHI (Aug 7)

2026 10.9M records affected Share on X

Data compromised

HIBP-verified: 10.87M unique email addresses for customers, patients and healthcare providers, plus names, physical addresses, phone numbers, dates of birth, genders and personal health data. Abbott Aug 5, 2026 update: some impacted files contain personal information and/or personal health information; individual notifications pending review completion.

Technical writeup

Company-confirmed Cancer Diagnostics intrusion with HIBP-attested scale — Abbott first acknowledged unauthorized access to a limited number of legacy Exact Sciences systems on July 16, 2026 after ShinyHunters listed the unit for pay-or-leak extortion. On August 5, 2026 Abbott updated that statement: some of the impacted files contain personal information and/or personal health information, the review of who is affected was still underway, notifications would follow, operations/manufacturing/lab/product availability were unaffected, and the attack was vishing rather than encryption malware. On August 7, 2026 Have I Been Pwned loaded the published Exact Sciences corpus: 10,869,543 unique email addresses for customers, patients and healthcare providers, with dates of birth, genders, names, phone numbers, physical addresses and personal health data (HIBP marks the breach sensitive). HIBP dates the breach to July 15, 2026 and attributes publication to the ShinyHunters campaign covered by BleepingComputer. recordsAffected is the HIBP unique-email count. Separately, Abbott continues to treat a ShadowByt3$ LabCentral portal claim as distinct (see abbott-labcentral-shadowbyt32026).

Root cause

Vishing-led unauthorized access to legacy Exact Sciences internal systems in Abbott Cancer Diagnostics (company: not ransomware encryption). ShinyHunters ran a pay-or-leak campaign and later published data; Have I Been Pwned loaded 10,869,543 unique emails on August 7, 2026.

References