Precipio Data Breach Affects 22,739 People, Exposing SSNs and Health Info

Precipio, Inc., a healthcare diagnostics company specializing in cancer testing, recently experienced a data breach involving sensitive patient information.

Precipio learned that an unauthorized user had accessed an employee’s cloud-based storage account. Following an investigation with third-party cybersecurity experts, it was determined that the unauthorized access occurred on or around Nov. 23, 2025. During this incident, certain files were copied without authorization.

The ransomware group INC RANSOM claimed responsibility, stating they had obtained 150 GB of Precipio’s data. The group posted about the attack on Dec. 2, 2025, via their network on Tor, indicating that the breach was part of a targeted ransomware campaign.

The compromised files contained a range of personally identifiable information (PII) and protected health information (PHI), including names, addresses, Social Security numbers, medical record numbers, dates of birth, clinical or treatment details, medical procedure information, medical provider names, prescription information and health insurance information. The specific data exposed varies by individual.

Precipio reported the breach to the U.S. Department of Health and Human Services on Jan. 23, 2026, listing 22,739 people affected. State filings list 4,952 Texans and 227 Massachusetts residents.

A notice of the incident was posted to Precipio website. The breach was also disclosed to the New Hampshire Attorney General and to the U.S Department of Health and Human Services.

Precipio's response

Precipio said it finished a first review of the files on March 9, 2026. On or about April 23, 2026, it began sending written notice to affected people, according to its filing with the New Hampshire Attorney General. It is offering free credit monitoring through Cyberscout, a TransUnion company.

The company encourages affected individuals to remain vigilant against identity theft and fraud by monitoring account statements and reviewing free credit reports for suspicious activity. Federal law entitles all consumers to one free credit report annually from each of the three major bureaus: Equifax, Experian and TransUnion.

Additional steps such as placing a fraud alert or a credit freeze on credit files are also recommended, especially in light of the sensitive nature of the information exposed.

For those who may be impacted, Precipio has set up a dedicated assistance line at 917-664-7071, available Monday through Friday from 9 a.m. to 5 p.m. Eastern time, excluding holidays. The notice letters list a second assistance line, 1-833-289-4199, open Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding holidays.