Cancer patient’s sensitive information obtained by ‘unknown parties’ years after being exposed at screening lab

A medical laboratory that specializes in cancer screening has admitted to a shocking data breach that left sensitive patient information exposed for years and made accessible to unauthorized parties.

California-based Guardant Health notified affected individuals that information related to samples collected in late 2019 and 2020 was “inadvertently” made available to the public online after an employee mistakenly uploaded it.

The leaked information includes:

• name
• age
• Medical records and ID number
• Medical information, such as treatment information and dates
• Test results

Of course, many affected individuals may be completely unaware that their data is even being stored by Guardant. This is because it is their doctors and hospitals that send the samples for testing.

Worryingly, Guardant Health warns that the data will be accessible for a long period of time (from October 5, 2020, to February 29, 2024) before the company takes notice.

The company said documents containing sensitive information were copied by “unidentified third parties” between September 8, 2023 and February 28, 2024, prompting fraudsters and cybercriminals to use the information to achieve their goals. purpose concerns.

Guardant Health has not disclosed details about how many patients’ privacy was at risk due to the breach. Furthermore, they did not explain why the security flaw was not discovered earlier.

Although Guardant said the exposed data did not include financial information or Social Security numbers, the potential consequences for affected patients could be serious.

So far, Guardant’s advice to patients is disappointingly general. They advise patients to monitor their healthcare provider’s statements for irregularities.