Henry Schein

Disclosed Oct 15, 2023Confirmed

BlackCat ransomware attack on Henry Schein disrupts operations and hits employee data

Healthcare distributor Henry Schein said on October 15, 2023 that it had found a cyber incident the previous day and took systems offline, disrupting its business. Its notices said employee data such as Social Security and driver's license numbers may have been accessed.

What is known

People affected	Not stated in the sources we have
Disclosed	Oct 15, 2023
Discovered	Oct 14, 2023
Happened	Sep 27, 2023
Attack	Ransomware
Data exposed	NamesAddressesPhone numbersEmailsDates of birthSocial Security numbersGovernment IDsEmployment
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Henry Schein

Official noticeatg.wa.gov

Washington Attorney General breach notice: Henry Schein

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Henry Schein

Regulatoroag.ca.gov

California AG data breach notice: Henry Schein, Inc.

SEC filingsec.gov

Henry Schein Form 8-K Exhibit 99.1, October 16, 2023

Official noticeago.vermont.gov

Vermont Attorney General: 2023-11-17 Henry Schein Data Breach Notice to Consumers

Notices filed

TotalOct 15, 2023

ResearchCount not stated

Residents of VTNov 17, 2023

Vermont AGCount not stated

Residents of CADec 6, 2023

California AGCount not stated

Residents of WAJan 26, 2024

Washington AG1,953 people

Residents of ORMay 31, 2024

Oregon DOJ63,760 people

Residents of CAOct 23, 2024

California AGCount not stated

Residents of OROct 23, 2024

Oregon DOJ166,432 people

History of this record

source2026-09-25

empty to https://ago.vermont.gov/document/2023-11-17-henry-schein-data-breach-notice-consumersby backfillSource

sector2026-09-25

other to healthby seedSource

data_types2026-09-25

[] to ["names","addresses","phone","emails","dob","ssn","government-id","employment"]by seedSource

disclosed2026-09-25

2023-12-06 to 2023-10-15by seedSource

summary2026-09-25

empty to Healthcare distributor Henry Schein said on October 15, 2023 that it had found a cyber incident the previous day and took systems offline, disrupting its business. Its notices said employee data such as Social Security and driver's license by seedSource

title2026-09-25

empty to BlackCat ransomware attack on Henry Schein disrupts operations and hits employee databy seedSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2023-10-14by backfillSource

occurred2026-09-25

empty to 2023-09-27by backfillSource

disclosed2026-09-25

2024-10-23 to 2023-12-06by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Henry Schein