Exact Sciences

exactsciences.com

Trustworthiness

Published by the company

accounts: 10,869,543
Breach happened: 15 July 2026
Added to the register: 7 August 2026

In July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign. The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10.9M unique email addresses belonging to customers, patients and healthcare providers, along with names, addresses, phone numbers and health records. Abbott subsequently published a public notice advising that "some of the impacted files contain personal information and/or personal health information" and that more specific information would follow once their review of the incident was complete. For context, Exact Sciences is the maker of the Cologuard at-home colorectal cancer screening test.

What leaked

Health data

Health details cannot be reset and make a fake clinic or insurer sound convincing.
Phone number

Used for calls and texts that open already knowing who you are.

Fake adviser calls →
Postal address

Used to stage a delivery, a utility visit or a neighbour that never happened.

Social engineering →
Date of birth

Used to clear the “confirm your identity” step on a call you did not make.

Identity theft →
Email address

The address every one of these scams will arrive at.

Phishing →
Name

Used to make a cold approach look like a conversation already under way.

Social engineering →
Demographic details

Age, gender and the like. Relatively harmless on their own.

What is not listed

Passwords
Bank details
Card numbers

So there is no password to change here — the usual first move does not apply.

The record shows what was found in the data. Not listed is not the same as proven untouched.

Source

The company said so itself, which is the strongest evidence that it happened — though companies tend to understate how far a breach reached.

The company itself

Exact Sciences

See the source →

Verification service

Have I Been Pwned

Under licence CC BY 4.0

Collects leaked files, checks they are genuine, and lets anyone search their own address in them. Run by one security researcher since 2013.

See the source →

Security professionals

BleepingComputer →