Baylor Genetics breach: network accessed June 11 to 17, 2026, with patient data involved

What happened in the Baylor Genetics breach?

Baylor Genetics says it identified suspicious activity in a limited part of its information technology environment on or around June 15, 2026, secured the affected systems and began an investigation with outside forensic specialists. It says its review of what information was involved, and whose, was completed on or about July 30, 2026.

The letter says the company coordinated with law enforcement and regulators, added monitoring and security controls, and strengthened identity and access management.

Date	What the letter and the regulators' records say
June 11, 2026	Unauthorized access begins; breach date on Washington's list and Indiana's report
On or around June 15, 2026	Baylor Genetics identifies suspicious activity
June 17, 2026	The access ends
On or about July 30, 2026	Review of the affected data completed
August 14, 2026	Date printed on the letter; report submitted to HHS; notice recorded by California and Washington; report logged in Massachusetts; Indiana's report gives this as the date notice was sent
August 18, 2026	Posted on the Texas attorney general's list
November 14, 2026	Last day to enroll in IDX

The letter is dated 60 days after Baylor Genetics identified the activity, and 15 days after its review finished. The HIPAA Breach Notification Rule entry explains the 60-day limit for telling patients.

What information was involved?

The filed letter leaves the list of information as a blank field filled in for each person. The state records show how wide the categories are. Texas lists names, addresses, Social Security numbers, driver's license and other government ID numbers, financial information, medical information, health insurance information and dates of birth. Massachusetts marks Social Security numbers, medical records, financial accounts and driver's licenses as breached, and payment card numbers as not. Washington lists names, dates of birth, health insurance policy or ID numbers and medical information.

Information type	Texas	Massachusetts	Washington
Social Security number	Yes	Yes
Driver's license or government ID	Yes	Yes
Financial account	Yes	Yes
Credit or debit card number	Yes (with account numbers)	No
Medical information	Yes	Yes	Yes
Health insurance	Yes		Yes
Date of birth	Yes		Yes

How many people were affected?

Regulator	What it counts	Number
HHS Office for Civil Rights	Individuals affected	2,810,878
Texas attorney general	Texans	248,430
Massachusetts consumer affairs office	Massachusetts residents	56,636
Washington attorney general	Washingtonians	27,243
Indiana attorney general	Total affected, as reported to Indiana	986
Indiana attorney general	Indiana residents	12

Indiana's total of 986 is far below the federal figure and below the counts in Texas, Massachusetts and Washington alone, so it cannot be the full number; the report does not say what it covers. Baylor Genetics appears in the Texas ranking and the Washington ranking.

What is Baylor Genetics offering people who got a letter?

Baylor Genetics offers credit monitoring and identity protection through IDX at no cost; the filed copy shows the length as 12 or 24 months, so each letter carries its own term.

Item	Detail from the letter
Provider	IDX
Length	12 or 24 months, printed on each letter
Enrollment	app.idx.us/account-creation/protect, with the enrollment code on the letter
Deadline	November 14, 2026
Phone hours	Monday to Friday, 9 am to 9 pm Eastern Time, excluding holidays (the number is blank in the filed copy)
Postal address	2450 Holcombe Blvd., Suite 2210, Houston, TX 77021

The credit monitoring offers guide compares other notices.

What the documents leave open

• How the unauthorized third party got in, and whether ransomware was involved.
• Whether genetic test results were among the medical information.
• What Indiana's total of 986 covers.

Was my Social Security number exposed in the Baylor Genetics breach?

It may have been. Texas and Massachusetts both record Social Security numbers among the information involved, but the letter lists the items person by person, so your own letter is the answer for your data.

Can I still enroll in Baylor Genetics' identity protection?

The letter's enrollment deadline is November 14, 2026.