Abbott Laboratories investigates two cybersecurity incidents amid extortion claims

Incidents Overview

Abbott Laboratories is currently investigating two cybersecurity incidents involving its internal systems. One incident pertains to unauthorized access in its Cancer Diagnostics business, while the other involves claims from the ShinyHunters extortion group about a breach of the LabCentral portal.

Response and Impact

Abbott stated that the cyber incidents do not affect its business operations, manufacturing, or patient services. The company has activated its incident response protocols, engaged cybersecurity experts, and has notified law enforcement regarding the breaches. Abbott does not foresee any material impact on its business or financial results.

ShinyHunters Claims

The ShinyHunters group has threatened to publish allegedly stolen data and claimed to have gained access through a vishing attack. This type of social engineering targets employees' Microsoft Entra single sign-on (SSO) accounts. ShinyHunters has been noted for targeting various medtech companies and has previously been linked to other data breaches.

Broader Context

The method of attacking corporate SSO accounts illustrates a growing trend of threat actors exploiting social engineering tactics to gain unauthorized access. Companies in the medical technology space have increasingly found themselves under siege from such extortion groups.