Lumara Bio Data Breach Compromises Personal and Health Information

Lumara Bio USA Inc., the U.S. oncology therapeutics division of ITM Isotope Technologies Munich SE, disclosed a data breach involving the personal information of current and former employees.

On or around Sept. 12, 2026, ITM, the Germany-based parent company of Lumara Bio USA, became aware of a cyber-attack affecting certain ITM information technology systems.

The investigation into the incident revealed that an unauthorized party gained access to certain ITM systems holding personal information of current and former Lumara Bio USA employees.

The types of personal information potentially exposed included names, addresses, dates of birth, Social Security numbers, driver's license numbers, other government identification information, salary and compensation information, other employment-related information and financial account information.

The breach was disclosed to the Massachusetts and the New Hampshire attorneys general offices on Oct. 26, 2026. The company notified affected individuals by written notice on Oct. 26, 2026.

Lumara Bio USA's response to the breach

The company is offering affected individuals a complimentary 24-month membership in Experian IdentityWorks.

The company has also set up a dedicated toll-free helpline for affected individuals who have questions or need assistance enrolling in the identity protection services. The helpline is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays.