The incident, occurring in July 2026, involved unauthorized third-party access to systems managed by the Wisconsin-based cancer screening firm. The cybercriminal group ShinyHunters has claimed responsibility for the attack, alleging the theft of names, dates of birth, and one million Social Security numbers. While the extent of the exfiltrated data remains unconfirmed by the companies, the lack of timely notification to affected individuals has raised concerns regarding compliance with state and federal privacy statutes.

Legal representatives are currently evaluating potential claims for damages and seeking court-mandated improvements to the companies' cybersecurity infrastructure. Patients affiliated with Abbott or Exact Sciences who fear they are at risk of identity theft are being urged to review their legal options as the investigation into the firms' data protection protocols proceeds.