Krystal BioTech, Inc. (“Krystal”), a biotechnology company based in Pittsburgh, Pennsylvania, has filed a notice of data breach with the Attorney General of Massachusetts after discovering unauthorized access to confidential information entrusted to the company. The breach, reported on January 30, 2024, resulted in the exposure of sensitive information, including names, Social Security numbers, financial account information, and driver’s license numbers of affected individuals.
The incident was brought to Krystal’s attention on November 16, 2023, when the company learned of a cyberattack through a third party. This attack allowed an unauthorized party to access information provided to Krystal. In response, Krystal promptly secured its systems and engaged external cybersecurity professionals to investigate the incident. The investigation confirmed unauthorized access to confidential information belonging to certain individuals.
Following the discovery of the breach, Krystal conducted a thorough review of compromised files to identify the extent of the leaked information and impacted individuals. This process was completed on November 21, 2023. While the specific breached information varies for each individual, it may include names, Social Security numbers, financial account details, and driver’s license numbers.
On January 30, 2024, Krystal BioTech initiated the distribution of data breach notification letters to all individuals affected by the recent security incident. These letters provide victims with a comprehensive list of compromised information associated with them.
Individuals who have received data breach notifications from Krystal BioTech are urged to take necessary precautions to safeguard themselves against potential fraud or identity theft. Consulting with a data breach lawyer can offer guidance on protecting personal information and exploring legal options following the breach.
Established in Pittsburgh, Krystal BioTech specializes in the discovery, development, and commercialization of genetic medicines to address unmet medical needs. The company’s primary drug, VYJUVEK, is a topical gel used for treating wounds in patients with dystrophic epidermolysis bullosa. With a workforce of over 210 employees, Krystal BioTech generates approximately $71 million in annual revenue.
