Abbott Says Vishing Attack Accessed Cancer Diagnostics Systems; Personal Data Review Underway

Summary

Abbott says a vishing attack led to unauthorized access to a limited number of Cancer Diagnostics systems. Some files contain personal or health information, which Abbott is reviewing; it reports no impact on operations or patient services.

Key points

• Abbott says the incident involved unauthorized access to a limited number of internal systems in its Cancer Diagnostics business.
• The company identified the incident as a vishing attack, not an encryption-malware event.
• Abbott says some impacted files contain personal information and/or personal health information; its review is ongoing, and required notifications will follow.
• The company says business operations, products, manufacturing, laboratory operations, and patient services were not affected.
• Abbott says the incident did not affect other Abbott businesses, sites, or systems, and that legacy Exact Sciences systems are separate.
• Abbott says it engaged third-party cybersecurity experts and law enforcement and took steps to address the incident.