Centers Laboratory Data Breach Exposes Sensitive Health Information of Over 540,000 Individuals
Healthcare diagnostics provider Centers Laboratory has reported a data breach affecting over 540,000 individuals, with sensitive personal and health information exfiltrated by the WorldLeaks extortion group.
New Jersey-based Centers Laboratory has disclosed a significant data breach that impacted its IT environment between August 9 and August 14, 2025. The intrusion, discovered nearly a year prior to the notification, led to threat actors gaining "limited access" to the company's systems. This access allowed for the exfiltration of a substantial amount of personal and protected health information (PHI).
The compromised data includes highly sensitive details such as names, dates of birth, Social Security numbers, driver's license or state identification numbers, and passport numbers. Additionally, health insurance and medical information belonging to affected individuals were also stolen. The full scope of the breach was recently detailed by the Department of Health and Human Services' data breach tracker, which confirmed that 542,377 individuals were impacted.
The cybercriminal group responsible for the attack has been identified as WorldLeaks. This group listed Centers Laboratory on its website in October 2025, claiming to have stolen over 720 GB of data, comprising more than 1.6 million files. WorldLeaks has gained notoriety for targeting major companies, emerging in 2025 after the shutdown of the Hunters International ransomware group.
Following its emergence, WorldLeaks shifted its focus away from file-encrypting malware, concentrating instead on data theft and extortion. The group's operational model involves exfiltrating sensitive data and then threatening to publish it unless a ransom is paid. At the time of reporting, WorldLeaks' website listed over 170 organizations as victims, underscoring its widespread impact.
The breach at Centers Laboratory highlights the persistent threat posed by data extortion groups to the healthcare sector. The exfiltration of PHI can lead to identity theft, financial fraud, and significant privacy violations for affected individuals. Healthcare organizations, due to the sensitive nature of the data they hold, are prime targets for such attacks.
While the exact attack vector remains unspecified in initial reports, the incident underscores the critical need for robust cybersecurity measures within healthcare providers. This includes regular security audits, employee training on phishing and social engineering tactics, and strong access controls to prevent unauthorized system entry.
The notification to affected individuals and government agencies is a crucial step in the incident response process. However, the long-term consequences for the 540,000+ individuals whose data was compromised remain a significant concern. The stolen information could be used for various malicious purposes for years to come.
This incident serves as a stark reminder of the evolving threat landscape and the sophisticated tactics employed by cybercriminals. Organizations handling sensitive data must remain vigilant and continuously adapt their security postures to defend against increasingly advanced attacks.