Security News > 2023 > September > Johnson & Johnson discloses IBM data breach impacting patients

Johnson & Johnson Health Care Systems has informed its CarePath customers that their sensitive information has been compromised in a third-party data breach involving IBM. IBM is a technology service provider for Janssen; specifically, it manages the CarePath application and database supporting its functions.
IBM has published a separate announcement about the incident that says there are no indications the stolen data has been misused.
A couple of weeks back, the Colorado Department of Health Care Policy & Financing informed four million individuals that their personal and medical data had been exposed due to the breach on IBM. BleepingComputer has asked IBM about whether this incident is related to the MOVEit attack, and a spokesperson told us that it is a separate incident caused by different threat actors.
Colorado warns 4 million of data stolen in IBM MOVEit breach.
HCA confirms breach after hacker steals data of 11 million patients.
Freecycle confirms massive data breach impacting 7 million users.
News URL
Related news
- UN aviation agency investigating possible data breach (source)
- Washington state sues T-Mobile over 2021 data breach security failures (source)
- Largest US addiction treatment provider notifies patients of data breach (source)
- STIIIZY data breach exposes cannabis buyers’ IDs and purchases (source)
- EU law enforcement training agency data breach: Data of 97,000 individuals compromised (source)
- Wolf Haldenstein law firm says 3.5 million impacted by data breach (source)
- Otelier data breach exposes info, hotel reservations of millions (source)
- PayPal to pay $2 million settlement over 2022 data breach (source)
- UnitedHealth now says 190 million impacted by 2024 data breach (source)
- PowerSchool starts notifying victims of massive data breach (source)