Attorney General Matthew J. Platkin and the Attorneys General of New York and Connecticut today secured $4.5 million from Enzo Biochem, Inc., for failing to adequately safeguard the personal and private health information of its patients. Enzo is a biotechnology company that offered patients diagnostic testing at its laboratories in New York, Connecticut, and New Jersey. An investigation found that Enzo had deficient data security practices, which led to a 2023 ransomware attack that compromised the personal and private information of approximately 2.4 million patients nationwide, including about 331,600 New Jersey residents. As a result of the agreement, Enzo will pay $4.5 million, of which New Jersey will receive more than $930,000, and will strengthen its data security practices.
