The incident occurred back in April, but still not all victims know about it.
Exactech, a manufacturer of medical implants and surgical instruments, has admitted that it was the victim of a hacker attack that could have compromised the personal information of customers.
According to the company's representatives, in April 2023, suspicious activity was detected in its computer network. The investigation of the incident showed that during the period from April 4 to April 20, unknown persons could illegally download a number of files containing confidential information from internal systems.
"Based on the results of the audit, it was established which personal data of individuals in the United States could have been affected as a result of the incident. Then Exactech started collecting contacts of potential victims and sent written notifications to those of them whose contact details were obtained," the official statement says.
The compromised data may include names, social security numbers, financial account and credit/debit card information, health insurance and medical history data, user names, email addresses and passwords, and other personal information. The set of potentially compromised data varies between individuals.
The statement did not indicate the number of people affected, but a notice filed with the Maine Attorney General's Office said 4,230 people were affected.
According to Exactech, "the company has notified federal law enforcement and regulatory agencies in accordance with the law. To date, this investigation has found no evidence that personal information has been misused in any way beyond the initial unauthorized upload."
Exactech encourages anyone who may have been affected by the incident to be vigilant and watch out for possible cases of theft and fraud. To do this, it is recommended that you regularly check your bank account statements and use free reports from credit bureaus.
Exactech, a manufacturer of medical implants and surgical instruments, has admitted that it was the victim of a hacker attack that could have compromised the personal information of customers.
According to the company's representatives, in April 2023, suspicious activity was detected in its computer network. The investigation of the incident showed that during the period from April 4 to April 20, unknown persons could illegally download a number of files containing confidential information from internal systems.
"Based on the results of the audit, it was established which personal data of individuals in the United States could have been affected as a result of the incident. Then Exactech started collecting contacts of potential victims and sent written notifications to those of them whose contact details were obtained," the official statement says.
The compromised data may include names, social security numbers, financial account and credit/debit card information, health insurance and medical history data, user names, email addresses and passwords, and other personal information. The set of potentially compromised data varies between individuals.
The statement did not indicate the number of people affected, but a notice filed with the Maine Attorney General's Office said 4,230 people were affected.
According to Exactech, "the company has notified federal law enforcement and regulatory agencies in accordance with the law. To date, this investigation has found no evidence that personal information has been misused in any way beyond the initial unauthorized upload."
Exactech encourages anyone who may have been affected by the incident to be vigilant and watch out for possible cases of theft and fraud. To do this, it is recommended that you regularly check your bank account statements and use free reports from credit bureaus.
