Myriad Genetics Data Breach Review: Patient Records Under Assessment

In a Form 8-K filed with the U.S. Securities and Exchange Commission on November 5, 2026, Myriad says it detected unauthorized access within its information technology network on November 2. It says it started its incident response procedures, temporarily suspended its testing operations and order management systems, reset certain system credentials, and brought in outside experts.

Myriad’s customer notice, updated November 10, says all systems are fully restored, operations have resumed, and additional security measures are in place while the investigation continues.

The 8-K says the full scope of the unauthorized access is still under investigation, including whether any patient records were accessed on systems that contain patient information. Myriad hasn’t said what kinds of information, if any, were involved or how many people could be affected.

As of November 11, 2026, we found no notice letters to individuals and no Myriad filing on the breach lists kept by California, Massachusetts, Texas, or Vermont, or on the federal HHS list, whose latest entries date from October 15. This article may be updated if Myriad sends notices or regulators publish filings.

If you’ve had a test through Myriad, there are sensible steps you can take now, before any letter arrives:

• Keep any mail or email from Myriad about this incident. A formal notice would say what information was involved and what help, if any, is offered.
• Watch your health plan’s explanation of benefits statements. Look for tests or services you didn’t order or receive.
• Freeze your credit if you want extra protection now. A freeze at Equifax, Experian, and TransUnion is free and can be lifted when you need credit.
• Be skeptical of messages that mention Myriad or your test results. Verify any outreach independently before responding.

None of this is legal advice. A legal professional can explain how your rights may change once Myriad says what was involved.

Has Myriad Genetics notified you that your personal or medical information may have been accessed? Wilshire Law Firm is headquartered in California and handles data breach and consumer protection class actions nationwide. Once a breach involving patient data is confirmed, cases like this are sometimes pursued as class actions. If a Myriad letter reaches you, a legal professional on our nationally recognized, award-winning team can go through it with you in a free case review, any time of day, and there are no fees unless you get paid.

Contact Wilshire Law Firm once you hear from Myriad.