Abbott Laboratories probes two cyber incidents amid extortion claims

Abbott Laboratories is facing two simultaneous cybersecurity incidents stemming from fundamentally different but entirely preventable weaknesses. The first breach exploited human vulnerability through a vishing (voice phishing) attack that manipulated employees into compromising their Microsoft Entra SSO credentials, potentially exposing over 30 million sensitive medical records. The second incident leveraged weak credentials on a customer-facing portal, a basic configuration failure that should be caught by routine security audits. Together, these incidents highlight how attackers routinely combine social engineering and credential exploitation to bypass technical controls, and how medical data breaches carry outsized regulatory and reputational consequences under frameworks like HIPAA.