Henry Schein has lastly disclosed a knowledge breach following not less than two back-to-back cyberattacks in 2023 by the BlackCat Ransomware gang, revealing that over 160,000 folks had their private data stolen.
Henry Schein is a healthcare options supplier and a Fortune 500 firm with operations and associates in 32 nations and income of over $12 billion in 2022.
On October 15, the corporate disclosed that it was compelled to take some techniques offline to comprise a cyberattack that impacted manufacturing and distribution operations.
Whereas Henry Schein didn’t disclose the character of the assault, the BlackCat (ALPHV) ransomware gang claimed accountability, stating that they stole 35 TB of delicate information.
Nearly a month later, on November 22, the corporate as soon as once more disclosed that it suffered one other assault, once more by the now shut down BlackCat ransomware gang.
The ransomware gang claimed to have encrypted Henry Schein’s community a second time after negotiations failed and threatened to encrypt it a 3rd time if a ransom was not paid.
Whereas it’s unknown if the risk actors adopted via with one other assault, they launched a few of the knowledge stolen from Henry Schein on their knowledge leak website.
Now, over a 12 months later, Schein has confirmed in a knowledge breach notification to the Maine Legal professional Common that the ransomware gang stole the non-public knowledge of 166,432 folks throughout these assaults.
“Following the incident, the Firm labored with an outdoor knowledgeable agency to evaluate probably affected information so as to determine data that was obtained by the unauthorized third-party as a part of the incident,” reads Henry Schein’s knowledge breach notification.
“This evaluate required substantial time and assets and progressed in the course of the first half of 2024.”
“The investigation not too long ago decided that your private data was affected as a part of the incident, together with your [Extra2]. It’s potential that different delicate details about you was additionally impacted, which can rely on what data was beforehand offered to the Firm about you.”
BleepingComputer contacted Henry Schein to ask what sort of information was stolen within the assault however didn’t obtain a response.
The corporate is now providing impacted customers a free 24-month membership to Experian’s IdentityWorksSM to assist monitor credit score historical past and detect indicators of fraud.