Patients who have undergone genetic testing with Baylor Genetics are being informed about a cybersecurity breach. This incident has revealed sensitive personal and medical information, which is of significant concern to those involved with in vitro fertilization (IVF). Experts in cybersecurity warn about the potential risks, as those affected by the breach are vulnerable to targeted scams.
Details of the Breach
Baylor Genetics discovered unusual activity within a part of its information system in June. An unauthorized party accessed sections of its network between June 11 and June 17. A review by July 30 revealed exposure of patient and employee data, such as laboratory test results, health insurance information, and for some, Social Security numbers.
“Upon identifying the incident, we immediately secured our systems, engaged leading independent cybersecurity and forensic specialists, notified law enforcement, and implemented additional security measures,” said Jason Maloni, a spokesperson for Baylor Genetics.
Company Response and Mitigation
The company detected suspicious activity around June 15 and began an investigation with outside experts. The investigation confirmed unauthorized access. Despite this, laboratory operations were uninterrupted, and genetic testing services continued unaffected. Letters were sent to potentially impacted individuals, advising on protective steps, such as setting up fraud alerts and using credit freezes.
“We are pleased to say that our systems are operational, our environment is secure, and our important work with all stakeholders continues as usual,” stated Maloni. Baylor Genetics remains unaware of any confirmed misuse of the compromised information.
Peculiar Risks to IVF Patients
This breach may lead to risks beyond typical identity theft. Information about fertility treatments could aid criminals in orchestrating convincing scams. David de Paula Santos Silva, CEO of CyberX, highlighted that attackers could create fraudulent schemes, masquerading as fertility clinics or other related entities, to demand urgent payments under false pretenses.
Lewis Berry, a security expert, emphasized that Social Security information is valuable to cybercriminals. However, details about IVF pose a greater threat due to the specificity they offer. Fraudsters could exploit this by inventing issues with embryos, treatment, or financial matters, exploiting the stress and urgency felt by those involved in IVF.
Safety Measures for Patients
Experts advise affected individuals to exercise caution with any communications related to fertility treatment or genetic testing. Danny Jenkins, CEO of ThreatLocker, emphasized skepticism toward emails that carry threats or urgency. He suggests verifying messages by contacting providers through a known number.
Carl B. Johnson of Cleared Systems advises slowing down when confronted with requests for payment. It’s crucial not to respond to payment demands stemming from unsolicited communications. Monitoring credit and insurance activities and being vigilant about messages referencing fertility or genetic testing is also recommended.
For the time being, Baylor Genetics has fortified its security protocols, improved monitoring, coordinated with authorities, and notified those potentially affected. The company reassures that their systems remain operational with no confirmed incidents of data misuse.