FEDERALItem 8.01 · voluntaryMalwareHealthcareHealthcareRansomwareData EncryptedHigh

Enzo Biochem Inc.

bd_409b502d441a610a · schema v1 · pii pii-v1

Severity

High

Financial impact

$4.50M

Discovered

—

Filed

Aug 14, 2024

To disclose

—

Affected

Not disclosed

Confidence

87%

Full breach record for Enzo Biochem Inc. →3 incidents on file

Enzo Biochem disclosed in an 8-K (Item 8.01) that it entered agreements effective August 8, 2024 with the Attorneys General of New York, New Jersey and Connecticut resolving inquiries related to a ransomware attack the Company experienced in April 2023. The Company agreed to pay $4.5 million, divided among the three AGs, and to implement cybersecurity enhancements and an Information Security Program. The Company neither admits nor denies the investigative findings.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Aug 14, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Enzo Biochem Inc.
norm: enzo biochem
SEC CIK: 0000316253
Domain: enzo.com

Name: Enzo Biochem Inc.
norm: enzo biochem
SEC CIK: 0000316253
Domain: enzo.com
Industry: Biotechnology / Clinical Laboratory Services
Industry: Healthcarellm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Entered Assurance of Discontinuance with the New York Attorney GeneralEntered Consent Order with the New Jersey Attorney GeneralEntered Assurance of Voluntary Compliance with the Connecticut Attorney GeneralAgreed to monetary relief of $4.5 million apportioned among the three Attorneys General

During the incident: Cooperated with the investigations
Changes made: Implement and maintain certain cybersecurity enhancements, substantially all of which have already been undertaken or are underway
Implement and maintain an Information Security Program as described in the agreements on a going forward basis
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/316253/000121390024069031/ea0211342-8k_enzobio.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Aug 14, 2024
Raw hash: 732b72d3388d179778cdaf679bb6d1917c83d7bbce35ab136ebdeb16f05ae0fd

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html21.7 KB

Download View at source

Reporting entityEnzo Biochem Inc.

Victim entityEnzo Biochem Inc.

IncidentRansomware

Stated responseCooperated with the investigations

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing