ENZO BIOCHEM INC
Aug 2024 · Graded Verified · Healthcare and Life Sciences · Government record
Incident summary
ENZO BIOCHEM INCAug 2024
$7.5M
Fines & legal costs
Regulatory / legal
Enzo Biochem lost the clinical records of roughly 2.47 million people through two employee logins, one left unchanged for a decade and shared among five staff, with no second factor standing between an email password and the lab's patient data. What walked out was names, test results, and about 600,000 Social Security numbers. A credential shared by five people and rotated once a decade is not authentication; it is a group password taped to the door.
Losses on the record
$4.5M
Fines & legal costs
Regulatory / legal
These measure different things and are never added together.
See the full accounting
Regulatory / legal · realized$7.5M · A
Regulatory / legal · realized$4.5M · V
Source:
Shown individually, never summed across measures.
Verified: the linked document states this figure.
Attested: a published report credits an identifiable source for this figure.
SEC 8-K, Item 8.01
Initial attack type compromised credentials confirmed · Impact data theft confirmed
Quantified 76 days after disclosure.
What the company has said it cost
The company’s own disclosed figure, as it changed over time. The categorized losses on the record carry their own sources.
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.