Baylor Genetics data security incident impacts 250,000 individuals

Baylor Genetics, a genetic diagnostics company, said a data security incident earlier this year compromised the sensitive personal information of nearly 250,000 individuals.

 

Baylor Genetics is a Houston, Texas-based clinical diagnostics and genomics laboratory specialising in precision medical genetics, rare disease detection, and advanced genomic sequencing. The company was established as a joint venture between Baylor College of Medicine and H.U. Group Holdings, serving patients and healthcare providers.

 

In a data security incident notice published on its website, Baylor Genetics said that on June 15, it identified unauthorised activity within portions of its internal network. The healthcare service provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to contain the incident, secure the affected network and notified relevant law enforcement authorities about the same.

 

“The investigation determined that an unauthorised third party accessed certain portions of our network, and certain data stored on our network, between June 11 and June 17, 2026,” Baylor Genetics said.

 

The compromised information included names, dates of birth, medical testing information, laboratory test results, health insurance details, and Social Security numbers. For current and former employees, the exposed information included Social Security numbers, government-issued identification numbers, and financial account information.

 

The incident was reported to the Texas state regulator where Baylor Genetics said that it has identified at least 248,430 people impacted by the incident.

 

Following the incident, Baylor Genetics secured the affected systems, strengthened its security and access controls, and implemented additional safeguards to protect sensitive information and prevent similar incidents in the future.

 

While Baylor Genetics found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

At the time of publishing, no known hacker group claimed responsibility for the cyber attack on Baylor Genetics. The genetic testing company also did not share details on who was behind the attack, how much data was compromised, or whether it had received a ransom demand.