TLDR Tech / InfoSec
Abbott probes two cyber incidents amid extortion claims
Abbott confirmed unauthorized access to legacy Exact Sciences systems after ShinyHunters listed the Cancer Diagnostics unit on its leak site, with the group claiming a vishing attack compromised a Microsoft Entra SSO account in mid-June and led to theft of over 30 million rows of customer PII, including a million-plus Social Security numbers, plus tens of millions of medical records and client notes. A separate threat actor, ShadowByt3$, claimed to have breached Abbott's LabCentral customer portal on July 4 using stolen credentials and exfiltrated business documents, though Abbott disputed that any of the data in that environment was sensitive. Neither actor has publicly released stolen data, and Abbott says it has activated incident response, engaged outside cybersecurity experts, and notified law enforcement in both cases.
Read the full story