Abbott says “only a limited number of internal systems within its cancer diagnostics business were affected, with no disruption to products, manufacturing, laboratory operations, or patient services.”
The attackers dialed a phone and asked for access. That got them a million Social Security numbers, 7.5 million dates of birth, and 22 million rows of doctor-patient notes. Abbott’s statement counts the systems and not the people, because 10.9 million exposed email addresses is a worse number to lead with. Cancer patients did not consent to being the collateral in a vishing call.