Henry Schein
Disclosed Oct 15, 20232 years agoConfirmed
BlackCat ransomware attack on Henry Schein disrupts operations and hits employee data
Healthcare distributor Henry Schein said on October 15, 2023 that it had found a cyber incident the previous day and took systems offline, disrupting its business. Its notices said employee data such as Social Security and driver's license numbers may have been accessed.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Oct 15, 2023 |
| Discovered | Oct 14, 2023 |
| Happened | Sep 27, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Addresses, Phone numbers, Emails, Dates of birth, Social Security numbers, Government IDs, Employment |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Henry Scheinoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Henry Scheinatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Henry Scheinjustice.oregon.gov · Official notice | Official notice |
| California AG data breach notice: Henry Schein, Inc.oag.ca.gov · Regulator | Regulator |
| Henry Schein Form 8-K Exhibit 99.1, October 16, 2023sec.gov · SEC filing | SEC filing |
| Vermont Attorney General: 2023-11-17 Henry Schein Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Oct 15, 2023 | |
| Vermont AGresidents of VT | Nov 17, 2023 | |
| California AGresidents of CA | Dec 6, 2023 | |
| Washington AGresidents of WA | Jan 26, 2024 | 1,953 |
| Oregon DOJresidents of OR | May 31, 2024 | 63,760 |
| California AGresidents of CA | Oct 23, 2024 | |
| Oregon DOJresidents of OR | Oct 23, 2024 | 166,432 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-11-17-henry-schein-data-breach-notice-consumers · backfill source
- 2026-09-25 · sector: other to health · seed source
- 2026-09-25 · data_types: [] to ["names","addresses","phone","emails","dob","ssn","government-id","employment"] · seed source
- 2026-09-25 · disclosed: 2023-12-06 to 2023-10-15 · seed source
- 2026-09-25 · summary: empty to Healthcare distributor Henry Schein said on October 15, 2023 that it had found a cyber incident the previous day and took systems offline, disrupting its business. Its notices said employee data such as Social Security and driver's license · seed source
- 2026-09-25 · title: empty to BlackCat ransomware attack on Henry Schein disrupts operations and hits employee data · seed source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2023-10-14 · backfill source
- 2026-09-25 · occurred: empty to 2023-09-27 · backfill source
- 2026-09-25 · disclosed: 2024-10-23 to 2023-12-06 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.