Abbott Cancer Diagnostics, a business unit of Abbott Laboratories, disclosed a cybersecurity incident in July 2026. This incident involved unauthorized access to a limited number of internal systems, with some accessed files containing personal and health information.
While Abbott has confirmed the exposure of personal and health information, a nationwide victim count has not been publicly disclosed. Only Oregon has been explicitly mentioned as an affected state, based on a notification filed with the Oregon Department of Justice on August 5, 2026. Data types confirmed by Abbott include "Personal Information" and "Personal Health Information". Third-party reports allege other data types such as names, contact details, dates of birth, emails, phone numbers, Social Security numbers, patient notes, and medical orders, but these remain unverified by Abbott.
Individual notifications to affected consumers were not yet complete as of August 5, 2026. Further details, including the total number of individuals affected, may emerge as the investigation progresses and notifications are completed.