Myriad Genetics disclosed unauthorized access to its information technology network in a federal regulatory filing in November 2026. The Salt Lake City, Utah-based genetic testing company stated that it detected the unauthorized activity on November 2, 2026. Following discovery, the company initiated incident response protocols, reset credentials, temporarily suspended testing operations and order-management systems, and retained external cybersecurity experts.
As of the initial disclosure, the company has not confirmed whether any sensitive data or patient records were accessed or exfiltrated. No specific data categories, such as Social Security numbers or protected health information, have been confirmed compromised, and no affected individual counts have been reported.
The investigation into the incident remains active. The full scope of the unauthorized access, including whether consumer or patient information was involved, has not yet been determined.