Enzo Biochem Suffers a Data Breach

Enzo Biochem, a biotechnology company renowned for producing and distributing DNA-based tests designed to identify viral and bacterial diseases, has recently confirmed in a filing with the Securities and Exchange Commission (SEC) that it fell victim to a ransomware attack.

The malicious cyber assault has exposed the confidential information of 2.47 million patients, including names, test information and 600,000 Social Security numbers.

Enzo Biochem said it has incurred and may continue to incur expenses related to the incident and is in the process of evaluating the full financial impact of the ransomware attack. Enzo Biochem has confirmed that affected individuals will be notified by mail if their information has been deleted and the incident will be reported to appropriate regulatory authorities.

It has said that in response to the attack, it implemented containment measures according to its disaster recovery plan, including disconnecting the affected systems from the internet and launched an investigation with the assistance of third-party cybersecurity experts and promptly notified law enforcement authorities.

Enzo Biochem said its operations had been maintained despite the attack, and its facilities remain open, enabling the continued provision of services to patients and partners. At the same time, the company confirmed the ransomware attack has resulted in significant expenses, including costs related to incident response, remediation, and investigation.

The firm said it discovered the breach on April 11 2023, while the SEC Form 8-K was submitted on May 30 2023.