Henry Schein has lastly disclosed an information breach following at the very least two back-to-back cyberattacks in 2023 by the BlackCat Ransomware gang, revealing that over 160,000 individuals had their private data stolen.
Henry Schein is a healthcare options supplier and a Fortune 500 firm with operations and associates in 32 international locations and income of over $12 billion in 2022.
On October 15, the corporate disclosed that it was pressured to take some programs offline to include a cyberattack that impacted manufacturing and distribution operations.
Whereas Henry Schein didn’t disclose the character of the assault, the BlackCat (ALPHV) ransomware gang claimed accountability, stating that they stole 35 TB of delicate recordsdata.
Virtually a month later, on November 22, the corporate as soon as once more disclosed that it suffered one other assault, once more by the now shut down BlackCat ransomware gang.
The ransomware gang claimed to have encrypted Henry Schein’s community a second time after negotiations failed and threatened to encrypt it a 3rd time if a ransom was not paid.
Whereas it’s unknown if the menace actors adopted via with one other assault, they launched among the knowledge stolen from Henry Schein on their knowledge leak website.
Now, over a yr later, Schein has confirmed in an information breach notification to the Maine Lawyer Common that the ransomware gang stole the private knowledge of 166,432 individuals throughout these assaults.
“Following the incident, the Company worked with an outside expert firm to review potentially affected files in order to identify information that was obtained by the unauthorized third-party as part of the incident,” reads Henry Schein’s knowledge breach notification.
“This review required substantial time and resources and progressed during the first half of 2024.”
“The investigation recently determined that your personal information was affected as part of the incident, including your [Extra2]. It is possible that other sensitive information about you was also impacted, which may depend on what information was previously provided to the Company about you.”
BleepingComputer contacted Henry Schein to ask what kind of knowledge was stolen within the assault however didn’t obtain a response.
The corporate is now providing impacted customers a free 24-month membership to Experian’s IdentityWorksSM to assist monitor credit score historical past and detect indicators of fraud.
