Cyber Incident Victim: Baylor Genetics
Timeline
Summary
Baylor Genetics, a Houston‑based genetic testing laboratory, disclosed that an unauthorized third party accessed part of its network, leading to a review that determined patient and employee personal information had been exposed. The exposed data for patients included names, dates of birth, medical test results, health insurance details and, for a subset, Social Security numbers, while employee data comprised Social Security numbers, government‑issued identification numbers and financial account information. The company completed its assessment and began notifying potentially affected individuals, noting the heightened risk of identity theft and related harms.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around June 15, 2026, Baylor Genetics identified a cybersecurity incident affecting a portion of its information technology environment. A subsequent forensic investigation determined that an unauthorized third party had accessed parts of its network between June 11 and June 17, 2026. Following the intrusion, the company conducted a review to ascertain what information had been involved and which individuals were affected, completing that review on or about July 30, 2026. After the review was finished, Baylor Genetics began sending notification letters to potentially affected individuals.
The information that may have been exposed for patients includes full names, dates of birth, medical testing information and laboratory test results, health insurance information, and, for a limited subset of patients, Social Security numbers. For current and former employees, the exposed data may have comprised Social Security numbers, government‑issued identification numbers, and financial account information. The specific details varied from one individual to another depending on the records held by the laboratory. Because Baylor Genetics performs genetic and laboratory testing, the exposed patient data could include especially sensitive medical information.
Individuals whose data was exposed may face an increased risk of identity theft, medical identity theft, insurance fraud, and related harm as a result of the breach. In response to the incident, the national class action firm Edelson Lechtzin LLP has opened an investigation into potential legal claims on behalf of affected patients and employees. Baylor Genetics has stated that it is continuing its notification process and cooperating with the ongoing forensic and legal reviews. The firm’s investigation remains active as it evaluates the possibility of pursuing a class action to address the alleged failure to protect sensitive personal and employee data.