Cook Medical Says Social-Engineering Scam Led to Unauthorized System Access
Summary
Cook Medical says an employee was deceived by a social-engineering scam, giving an outside party access to some systems on July 2. Contact and business information was involved, but the company reports no evidence sensitive data was accessed or operational impact.
Key points
- Cook Medical said an employee inadvertently gave an outside party access to some company systems in a July 2 incident after being deceived by social engineering.
- Information involved included U.S. and Canadian customer contact details, Salesforce communications records, internal business files, and employee names and company email addresses.
- The company said it detected and contained the unauthorized access on the same day.
- Cook Medical reported no evidence that sensitive or protected data was accessed.
- The company said its products, manufacturing, patient and customer service, and normal operations were unaffected.
- Cook Medical is notifying customers and employees and providing guidance on watching for further scams.
Article Details
- Victim Organization
- Cook Medical
- Incident Type
- Social engineering led to an employee inadvertently giving an outside party access to some company systems.
- Data Types Exposed
- Contact information for U.S. and Canadian customers
- Records of communications with Cook employees in Salesforce
- Some internal business files
- Employee names and company email addresses
- Operational Impact
- Cook Medical said there was no impact on its products, manufacturing, or ability to serve patients and customers; operations continued normally. The unauthorized access was identified and contained on the same day. The company said it had no evidence that sensitive or protected data was accessed.
- Claim Status
- confirmed