F500 Pharma & Biotech · Medical Products and Equipment · Data breach
Abbott Laboratories
Headline
Abbott's July 2026 double breach is the most recent significant finding on this tab, and one of the two incidents is attributed to ShinyHunters - the group behind the Salesforce social-engineering campaign that this…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Abbott's July 2026 double breach is the most recent significant finding on this tab, and one of the two incidents is attributed to ShinyHunters - the group behind the Salesforce social-engineering campaign that this tracker treats as its single biggest connective thread, reaching dozens of companies across many tabs. Abbott is also unusual among the manufacturers here in having a genuine direct consumer relationship through continuous glucose monitors, which stream physiological data from a person's body to a manufacturer platform continuously. That combination - a real consumer data stream plus exposure to the campaign already documented across this tracker - makes this row a priority for verification of scope and data types as notifications develop.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass for standard consumer/patient Terms of Use.
Data sharing
MAJOR, VERY RECENT (JULY 2026) DOUBLE BREACH: (1) The ShinyHunters group (the same extortion actor behind Amtrak, Charter Communications, Panera, and dozens of other breaches documented throughout this tracker) claimed to have exfiltrated more than 30 MILLION ROWS of patient data — names, emails, phone numbers, physical addresses, birthdates, and OVER 1 MILLION SOCIAL SECURITY NUMBERS — from Abbott's Cancer Diagnostics business, specifically LEGACY SYSTEMS at its subsidiary Exact Sciences (a Wisconsin-based at-home cancer-screening company). (2) A SEPARATE, apparently unrelated threat actor ('ShadowByt3$') separately claims to have breached Abbott's LabCentral customer portal (July 4, 2026) using compromised credentials, allegedly exfiltrating TECHNICAL documentation (operating manuals, product specifications, troubleshooting documentation) rather than patient data — Abbott says no customer or patient data was compromised. (The July 21, 2026 extortion deadline reported in coverage relates to the ShinyHunters incident, not this one.) Abbott has NOT independently confirmed the full scope of either claim, and neither group's claims have been independently verified through publicly leaked data as of this research.
Fees and billing
SIGNIFICANT LEGAL EXPOSURE: as of this writing (late July 2026), Abbott and Exact Sciences had NOT YET BEGUN notifying affected individuals of the Cancer Diagnostics breach — which plaintiffs' attorneys specifically argue may violate state and federal breach-notification laws requiring prompt disclosure. At least one proposed class action (reportedly brought by plaintiff Brian Troesch) was filed against Abbott in the U.S. District Court for the Northern District of Illinois around July 20, 2026, within days of the breach becoming public; a separate suit, Funkhouser v. Exact Sciences, was filed in Wisconsin. SEPARATE, UNRELATED LITIGATION: Abbott ALSO faces an employee class action alleging the company OVERCHARGED WORKERS for health insurance — a distinct labor/benefits dispute, not a data-privacy matter.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy abbott.com/privacy-policy.html | Not fetched yet | NO (HTML only) |
| Terms of service abbott.com/terms-of-use.html | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.