KRYSTAL BIOTECH, INC.
bd_3c9479cb266f37c8 · schema v1 · pii pii-v1
Full breach record for KRYSTAL BIOTECH, INC. →Krystal BioTech, Inc. experienced a targeted attack via a third party on November 16, 2023, resulting in unauthorized access to a limited amount of data. The incident affected approximately 7 individuals in New Hampshire, primarily employees. Personal information including names, addresses, and potentially Social Security numbers was accessed. Krystal engaged third-party forensic specialists, notified law enforcement, reset passwords, disabled unauthorized accounts, and implemented new technical safeguards. Affected individuals were offered complimentary credit monitoring and identity protection services.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 16, 2023
Begins
Nov 16, 2023
Discovered
Feb 5, 2024
Filed
vs. sector median
1 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Massachusetts State AGbd_270722eb61d954fc2024-02-06 · +1dVerified
- Indiana State AGbd_13c5f57922a86cc22024-01-30 · +6dCandidate
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Jan 30 (IN), last Feb 6 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.