Precipio identifies unauthorized access to isolated storage

Precipio (PRPO) reports that the Company recently identified a single, limited scope unauthorized access to a specific data folder stored within its secure cloud file environment. The company said, “The incident was limited to its file storage server and did not impact any of Precipio’s operations, diagnostics processes, or customer services, and the company continued to provide its services unhindered. There was no impact to patient care; nor impact to the company’s operations or finances. Upon detecting the activity, the Company immediately initiated its incident response procedures and engaged an external cybersecurity law firm and forensic specialists to assist in the investigation and to help ensure the security of its systems. Precipio also took prompt steps to secure the environment, reset passwords company wide, and enhance monitoring and at this time, we are not seeing evidence of continued unauthorized access. While the investigation remains ongoing, current findings indicate that an unauthorized third party accessed and downloaded certain historical files within the customer service folder. Initial investigation shows that the majority of these files contained previously used operational procedures, temperature logs, vendor invoices and similar historical information which poses no risk or damage to the company. No patient Social Security numbers, addresses, or other patient financial information was included. Additionally, no company proprietary or financial data was included in the folders that were breached. We are pursuing a thorough investigation with top-tier cybersecurity partners, and although the review is ongoing, our current assessment strongly suggests that the incident was limited in scope and that our systems are stable. Precipio maintains a comprehensive cybersecurity insurance policy and expects that costs associated with the investigation, forensic analysis, and related response efforts will be covered in accordance with policy terms. Based on the information available at this time the company does not anticipate any material impact to its operations, customers, patient care, or to its shareholders as a result of this incident.”