The 2025 Precipio data breach was a cyber incident involving unauthorized access to a company cloud-based storage account and the copying of certain files. According to the official notice, the access occurred on or around November 23, 2025.
The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/information-technology incident involving a network server and reported 501 affected individuals. Precipio's notice, updated on April 23, 2026, does not state a final total, so 501 should be treated as the published lower bound.
Verified Incident TimelineAfter identifying suspicious activity, Precipio secured the account, reset its password, and began an investigation. The investigation determined that the account was accessed without authorization and certain files were copied on or around November 23, 2025. A preliminary file review was completed on March 9, 2026, and the public notice was updated on April 23, 2026.
What Information May Have Been Affected?The information may vary by person. The official notice lists names, addresses, medical-record numbers, dates of birth, Social Security numbers, clinical or treatment information, medical-procedure information, provider names, contact information, facial images, prescription information, driver's-license or other government-identification numbers, and health-insurance information.
How the Company RespondedPrecipio says it secured the affected account, reviewed the files to identify relevant individuals, and notified federal law enforcement. The company also says it will continue evaluating and enhancing its technical safeguards.
What Should Affected People Do?Notice recipients should review credit reports, financial-account activity, health-insurance claims, and explanation-of-benefits statements for an unfamiliar transaction or service. People whose Social Security or government-identification information was affected may consider a free fraud alert or credit freeze based on their circumstances.