Henry Schein has lastly disclosed a knowledge breach following at the very least two back-to-back cyberattacks in 2023 by the BlackCat Ransomware gang, revealing that over 160,000 individuals had their private info stolen.
Henry Schein is a healthcare options supplier and a Fortune 500 firm with operations and associates in 32 nations and income of over $12 billion in 2022.
On October 15, the corporate disclosed that it was compelled to take some techniques offline to include a cyberattack that impacted manufacturing and distribution operations.
Whereas Henry Schein didn’t disclose the character of the assault, the BlackCat (ALPHV) ransomware gang claimed accountability, stating that they stole 35 TB of delicate recordsdata.
Nearly a month later, on November 22, the corporate as soon as once more disclosed that it suffered one other assault, once more by the now shut down BlackCat ransomware gang.
The ransomware gang claimed to have encrypted Henry Schein’s community a second time after negotiations failed and threatened to encrypt it a 3rd time if a ransom was not paid.
Whereas it’s unknown if the risk actors adopted via with one other assault, they launched a number of the knowledge stolen from Henry Schein on their knowledge leak web site.
Now, over a yr later, Schein has confirmed in a knowledge breach notification to the Maine Legal professional Normal that the ransomware gang stole the private knowledge of 166,432 individuals throughout these assaults.
“Following the incident, the Firm labored with an outdoor knowledgeable agency to overview doubtlessly affected recordsdata to be able to establish info that was obtained by the unauthorized third-party as a part of the incident,” reads Henry Schein’s knowledge breach notification.
“This overview required substantial time and sources and progressed throughout the first half of 2024.”
“The investigation just lately decided that your private info was affected as a part of the incident, together with your [Extra2]. It’s attainable that different delicate details about you was additionally impacted, which can depend upon what info was beforehand supplied to the Firm about you.”
BleepingComputer contacted Henry Schein to ask what kind of information was stolen within the assault however didn’t obtain a response.
The corporate is now providing impacted customers a free 24-month membership to Experian’s IdentityWorksSM to assist monitor credit score historical past and detect indicators of fraud.