Healthcare

March 4, 2026

Allegan, Michigan-based health and wellness product provider, Perrigo Company, suffered a cyberattack in March where personally identifiable information ended up stolen in the hack.
“On March 4, 2026, Perrigo detected a cybersecurity incident targeting two employee email accounts,” the company said in a notice to victims. “Upon learning of the incident, we immediately contained and remediated the unauthorized access that same day.”
As a result of the attack, the company launched an investigation with the assistance of third-party forensic specialists to determine the nature and scope of the unauthorized access. It also notified law enforcement.

October 18, 2025

Blue Springs, Missouri-based animal health product manufacturer, Durvet, Inc. suffered a cyberattack in October and is now letting victims know their personally identifiable information ended up stolen in the attack.
“On October 17, 2025, Durvet learned of suspicious activity on certain systems in its environment,” the company said in a letter to victims. “In response, Durvet immediately took steps to secure the network and initiated an investigation into the nature and scope of the event with the assistance of third-party computer forensic specialists.”
As a result of that investigation, Durvet determined its environment was subject to unauthorized access between October 17, 2025 to October 18, 2025. At that time the attackers stole or copied information.

March 11, 2026

Major medical device maker, Stryker, suffered a cyberattack claimed by pro-Iranian threat actors that caused a “global network disruption,” company officials said. That disruption affected manufacturing operations.
“Stryker is experiencing a global network disruption to our Microsoft environment as a result of a cyberattack,” the Portage, Michigan-based company said in an advisory on its website. “We have no indication of ransomware or malware and believe the incident is contained.
“Our teams are working rapidly to understand the impact of the attack on our systems.

November 13, 2025

Katy, Texas-based Catalyst RCM fell victim to a cyberattack resulting in its clients losing their customers’ information in a multi-organization ransomware hack.
Catalyst lost information in connection with the medical coding and billing services provided to Charleston, South Carolina-based molecular diagnostics laboratory, Vikor Scientific, Charleston-based Korgene, and Tampa, Florida-based KorPath diagnostic laboratories.
All three companies, Vikor, Korgene and KorPath fell victim to a ransomware attack from the Everest Group, according to a report from Ransomware Live. Everest ransom group collects and analyzes information about their victims. They specialize in customer privacy data, financial information, databases, credit card information, and more. The Everest ransom group leaks the victim’s data to the darknet and they announce any victim that will not contact them will suffer from a data leak.

November 1, 2025

Fremont, California-based medical instrumentation maker, Cytek Biosciences, Inc., suffered a cyberattack in November which resulted in threat actors stealing personally identifiable information in the hack.
“Cytek Biosciences experienced a data security incident involving unauthorized access to certain of our systems that occurred on or around November 1, 2025,” the company said in a letter to victims. “Based on our investigation, we learned on or around November 28, 2025, that, in connection with this issue, an unauthorized party obtained certain of your personal information.”
The information varied by affected individual and may have included, to the extent provided to Cytek, name, contact information (e.g., postal address, email address, and phone number), date of birth, Social Security number, driver’s license number, government-issued ID number, citizenship status, signature, health and medical information, financial account and compensation information, as well as Cytek employee account username and password.