Was It Breached Secria

Recent breaches

Baylor Genetics data breach: the letter, and what to do before 14 November

Baylor Genetics, a genetic testing lab in Houston, reported a breach affecting 2,810,878 people to federal health regulators, as of 1 November 2026.1,2

Baylor Genetics
P.O. Box 989728
West Sacramento, CA 95798-9728

Enrollment Code: Code
Enrollment Deadline: November 14, 2026

NOTICE OF Security event or data breach

... the information that may have been involved for you includes your name together with one or more of the following: Data elements

... go to https://app.idx.us/account-creation/protect and follow the instructions for enrollment using your Enrollment Code ...

  1. The return addressA post office box in West Sacramento, California, under Baylor Genetics' own name, though the lab is in Houston.2
  2. The deadline14 November 2026 to enroll in the free IDX protection, printed at the top of the letter.2
  3. Your dataEach letter fills in its own list, so yours says what was involved for you.2
  4. The enrollment siteType it in yourself, with the code from your letter. IDX's line is 1-866-200-0985.2

Drawn from the sample letter Baylor Genetics filed with California's attorney general. Checked 1 November 2026 against the sources.

The facts, as filed

"The company says" marks Baylor Genetics' own account. A listing here isn't a finding that the company was at fault.

What happened
The company says it found suspicious activity on or around 15 June 2026, and that an unauthorized third party accessed parts of its network, and data stored on it, between 11 and 17 June 2026. Its review of who was affected finished on or about 30 July.2
People affected
2,810,878 in Baylor Genetics' report to the HHS breach portal, filed 14 August 2026, as of 1 November 2026.1 Its Texas filing, published 18 August 2026, counts 248,430 Texans.4 Washington's list counts 27,243 Washingtonians.5
What leaked, for patients
The company says it varied by person: names and one or more of date of birth, medical testing information, laboratory test results, and possibly health insurance information. Social Security numbers were involved for "a very limited subset of patients".3
What leaked, for staff
For some current or former employees, the company says, Social Security numbers, government ID numbers and financial account information.3
Monitoring offer
12 or 24 months of IDX credit monitoring and identity protection at no cost, with enrollment by 14 November 2026. The monitoring has to be activated to work, the letter says.2
Lawsuit
As of 1 November 2026 we found no court-approved settlement, and no filed lawsuit we could read in a court record.

Seven days in June, a deadline in November

The dates come from the company's letter and the government lists.

  1. Unauthorized access begins, the company says.2

  2. Baylor Genetics spots suspicious activity.2

  3. Its review of who was affected is completed.2

  4. Letters dated, and the HHS report filed: 2,810,878 people.2,1

  5. Last day to enroll in the IDX protection.2

What to do if you got a Baylor Genetics letter

Match the steps to the data your letter lists. The full checklist covers every data type.

  1. Enroll in IDX by 14 November 2026.At the site printed in the letter, with your enrollment code, or by calling IDX at 1-866-200-0985. Then activate the monitoring.2
  2. Read your Explanation of Benefits statements.The letter asks you to check them, and your account statements and credit reports, for anything you don't recognize.2
  3. Social Security number listed: freeze your credit.Contact each of the three credit bureaus. A freeze is free to place and to lift, and lasts until you remove it.6
  4. Get an IRS identity protection PIN.The six-digit IP PIN stops someone else filing a tax return with your Social Security number. It's valid for one calendar year.7

Questions people ask

Why is my Baylor Genetics letter from West Sacramento?

The sample Baylor Genetics filed in California has a return address of P.O. Box 989728, West Sacramento, CA 95798-9728, under the company's name. The letter gives the lab's own address as 2450 Holcombe Blvd., Suite 2210, Houston, TX 77021.2 To check yours, compare it with the filed sample and our letter check.

Why does Baylor Genetics have my data?

It's a testing laboratory, and its tests are ordered by a doctor or another licensed provider, so you may know it only from a test result.8 The company says testing continued without interruption during the incident.3

Has Baylor Genetics had a data breach before?

California's list holds an earlier Baylor Genetics filing, reported 14 September 2020, for a breach dated 24 September to 14 November 2019.9

Is there a Baylor Genetics settlement or class action?

We found no court-approved settlement and no filed lawsuit we could read as of 1 November 2026. A real settlement comes with a court-approved notice that names the case. This isn't legal advice.

Sources 9
  1. Breach Portal: HIPAA cases currently under investigation, U.S. Department of Health and Human Services, Office for Civil Rights. Full list exported as CSV. Read 1 November 2026.
  2. Baylor Genetics: filing and sample notice (reported 14 August 2026), California Attorney General. Read 1 November 2026.
  3. Security Update: Notice Regarding Cybersecurity Incident, Baylor Genetics. Read 1 November 2026.
  4. Data Security Breach Reports, Office of the Texas Attorney General. Baylor Genetics, published 18 August 2026. Read 1 November 2026.
  5. Data Breach Notifications, Washington State Office of the Attorney General. Baylor Genetics, reported 14 August 2026. Read 1 November 2026.
  6. Credit freeze or fraud alert: Which is right for you?, Federal Trade Commission. Read 1 November 2026.
  7. Get an identity protection PIN (IP PIN), Internal Revenue Service. Read 1 November 2026.
  8. Annual Provider Notice (January 2026), Baylor Genetics. Read 1 November 2026.
  9. Baylor Genetics: filing (reported 14 September 2020), California Attorney General. Read 1 November 2026.

Every breach is checked against the company's own notice and a government record, and every source shows the day we read it. How we check