Baylor Genetics Data Breach

Hackers spent nearly a week inside Baylor Genetics’ network in June, accessing patient genetic testing information that, unlike a password or a credit card number, can never be reissued.

Baylor Genetics, a Houston-based clinical genetic-testing laboratory operated as a joint venture with Baylor College of Medicine, notified patients on August 14, 2026 of a data security incident. Baylor Genetics identified suspicious activity in its network on or about June 15, 2026. Its investigation determined that an unauthorized third party accessed portions of the network, and data stored on it, between June 11 and June 17, 2026.

Baylor Genetics then conducted what it describes as a detailed, time-intensive review to determine which individuals were affected and what information was involved. That review was completed on or about July 30, 2026, and notice went out August 14, 2026, roughly two months after the intrusion was identified.

Genetic Test Results Can’t Be Reset Like a Password

Most data breaches involve information that can eventually be changed: a new card number, a new password, even a new Social Security number in extreme cases. Genetic and laboratory test results don’t work that way. Once a person’s genetic information is exposed, it stays exposed for that person and, because DNA is shared, potentially for their biological relatives as well.

Baylor Genetics says it is not aware of any confirmed identity theft, fraud, or misuse of personal information connected to this incident.

What Information Was Exposed?

According to the notice, the information involved included your name together with one or more of the following:

• Dates of birth
• Medical testing information
• Laboratory test results
• Health insurance information (for some individuals)
• Social Security number (for a limited subset of patients)

The exact combination of data types involved varies by individual.

How Many People Are Affected?

Baylor Genetics has not disclosed a total number of affected individuals, either in its notice or in its filing with the California Attorney General. As a national clinical genetic-testing reference lab, Baylor Genetics processes samples for a large patient population, but no figure has been made public.

What Is Baylor Genetics Offering Affected Individuals?

Baylor Genetics is offering complimentary credit monitoring and identity protection services through IDX at no cost. The enrollment deadline is November 14, 2026. Affected individuals can enroll at app.idx.us/account-creation/protect using the enrollment code on their letter, or call IDX at 1-866-200-0985, Monday through Friday, 9 a.m. to 9 p.m. Eastern.

Your Information Is at Risk

A Social Security number can be used to open new credit or file a fraudulent tax return. Genetic and medical testing data carries a different kind of risk: it can be used to infer health conditions, affect insurability, or be shared in ways a patient never consented to, and it cannot be changed once it is exposed. Affected individuals should watch financial accounts and insurance statements for unfamiliar activity, pull a free credit report, and consider enrolling in the credit monitoring Baylor Genetics is offering.

Do You Have Legal Options?

Medical and genetic-testing laboratories that collect Social Security numbers and health information have a legal duty to secure that data. When that duty isn’t met, affected individuals may have legal rights and remedies worth discussing with an attorney.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review if you received a notice letter from Baylor Genetics.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

FAQ

Who is affected by the Baylor Genetics data breach?

Patients whose information was contained in files an unauthorized third party accessed between June 11 and June 17, 2026. Baylor Genetics has not disclosed a total number of affected individuals.

What information was exposed?

Name, plus one or more of: date of birth, medical testing information, laboratory test results, health insurance information, and, for a limited subset of patients, Social Security number, per Baylor Genetics’ own notice.

Why does genetic data matter more than a typical data breach?

Genetic and laboratory test results can’t be reissued the way a card number or password can. Once exposed, that information stays exposed, and because DNA is shared among relatives, a breach can carry implications beyond the individual patient.

Is Baylor Genetics offering credit monitoring?

Yes. Baylor Genetics is offering complimentary credit monitoring and identity protection through IDX at no cost, with an enrollment deadline of November 14, 2026.

Has my genetic data itself been misused?

Baylor Genetics says it is not aware of any confirmed identity theft, fraud, or misuse of personal information related to this incident. That does not mean the underlying exposure didn’t happen, only that no confirmed misuse has been reported yet.

Do I have a legal claim?

Medical and genetic-testing laboratories that collect Social Security numbers and health information have a legal duty to secure that data and to notify affected individuals. If you received a Notice of Data Security Incident from Baylor Genetics, contact the Data Breach Attorneys at Emery | Reddy at 206.207.8929 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.