This week, DNA and paternity testing company DNA Diagnostic Center announced it had discovered unauthorized access to its network that led to a data breach in August. Threat actors accessed the company’s systems and exfiltrated an archived database that housed files containing patient PII collected between 2004 and 2012.
As a result of the data breach, DDC says 2,102,436 people had their information exposed. Letters are being sent out to impacted individuals stating that their PII and sensitive data such as Social Security numbers or banking information may have been exposed.
The company stated, "Upon learning of this issue, DDC proactively contained and secured the threat and executed a prompt and thorough investigation in consultation with third-party cyber security professionals.” Along with the cyber security firm, DDC is also working with law enforcement, and the company hopes to “regain possession” of the stolen information.
Whether or not DDC can take back the data, the company advises those potentially impacted to monitor their accounts for any fraud or misuse.