ABBOTT LABORATORIES

Abbott Laboratories (CIK 18230) filed its 10-K Item 1C disclosing its cybersecurity risk management and governance framework. The filing details internal controls, third-party assessments, and Board oversight via the Audit and Public Policy Committees. No specific cybersecurity incident, material impact, or breach was reported in this section.

Abbott Laboratories reported a data breach to the Montana Attorney General. The breach was reported on 2019-02-06. The breach occurred from 1/9/2019 to 1/19/2019. 9 Montana residents were affected.

Abbott Laboratories reported a data security incident involving the loss of a portable drive containing employee personal information (SSN, DOB, stock options). The drive was provided to a third-party auditor on January 9, 2019, and reported missing on January 19, 2019. No improper access is suspected. Abbott provided 24 months of identity protection services to affected employees.

Abbott Laboratories submitted a California SB-494 breach notification regarding a cyber-attack on Anthem Blue Cross Blue Shield (Anthem) discovered on January 29, 2015. The incident involved unauthorized access to Anthem's systems, exposing personal information of Abbott Plan participants who received care in states where Anthem operates. Affected data included names, dates of birth, member IDs, addresses, phone numbers, emails, and employment information. Abbott advised participants to monitor credit and offered 24 months of free credit monitoring.