Centers Lab NJ LLC

Summary

Centers Laboratory disclosed a breach that exposed personal and health information of over 540,000 individuals after threat actors accessed its systems and exfiltrated data over several days. The intrusion, attributed to the WorldLeaks group, resulted in the leak of more than 1.6 million files totaling hundreds of gigabytes, including names, birth dates, Social Security numbers, identification documents, and medical records. Although no ransomware was deployed, the attackers engaged in data‑theft extortion, and the incident triggered regulatory notifications under HIPAA and state laws, with ongoing investigations and no public indicators of compromise released.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Centers Laboratory, a healthcare diagnostics provider based in Cedar Knolls, New Jersey, discovered an intrusion in its IT environment in August 2025. The investigation showed that threat actors gained limited access to the company’s systems between August 9 and August 14, 2025, during which they exfiltrated personal and protected health information including names, dates of birth, Social Security numbers, driver’s license or state identification numbers, passport numbers, and health insurance and medical information. The breach was discovered on August 25, 2025, and the company subsequently notified the U.S. government that the incident affected more than 540,000 individuals. According to the Department of Health and Human Services breach tracker, the total number of impacted individuals is 542,377. Public disclosure of the breach occurred on June 18, 2026, after notification to the Vermont Attorney General and other regulatory bodies.

Centers Laboratory was targeted by the WorldLeaks cybercrime group, which listed the organization on its website in October 2025. The hackers allegedly leaked more than 1.6 million files totaling 720 gigabytes that were stolen from Centers Laboratory’s systems. WorldLeaks emerged in 2025 following the shutdown of the Hunters International ransomware group and has focused on data theft and extortion rather than file‑encrypting malware. The threat actor claimed responsibility for the breach and posted the stolen data on the Tor dark web network on October 6, 2025. The incident affected Centers Laboratory’s core information systems, including databases containing patient, employee, and operational data. No technical indicators of compromise have been published as of June 2026, and no specific software versions or products have been identified as exploited.

In response, Centers Laboratory notified affected individuals and established a dedicated support line for breach‑related inquiries. The company reported the incident to multiple state attorneys general and the U.S. Department of Health & Human Services Office for Civil Rights as required by HIPAA. Regulatory investigations into the breach are ongoing. The incident triggered mandatory reporting under HIPAA and applicable state data protection laws. No further details about containment or remediation efforts have been made publicly available.

Sources

Sources available to members: 2 sources.