Cook Medical Reports Cyberattack that Leaked Customer Info

Cook Medical revealed that on July 2, an employee was deceived by a social engineering attack, and accidentally gave an outside party access to certain company systems.

The company said that it identified the unauthorized access and contained it quickly on the same day it happened. Cook’s investigation was conducted with an outside cybersecurity firm’s support, and found out details about the information involved.

The information stolen includes business contact information for U.S. and Canadian customers. It also includes communication records with employees in its Salesforce system, employee names and company email addresses, and certain business files accessed via SharePoint.

Based on its review, Cook determined it had no evidence that sensitive or protected data was accessed. The company notified customers and employees and offered guidance about how to watch for follow-on scams, the most likely real-world risk from this type of incident.

“This incident has not affected our products, manufacturing, or our ability to serve patients and customers,” Cook Medical said in a press release. “We take this seriously, and we will continue to update customers and employees as our investigation progresses.”

Check out the latest article in MPO’s cybersecurity column here!