On December 6, 2023, the California Office of the Attorney General disclosed a data breach affecting Henry Schein, Inc., initially announced on October 15, 2023. The incident involved the unauthorized exposure of employees' personal information, though the exact number of impacted individuals and the breach methodology remain undisclosed. The compromised data may include sensitive employee details, such as names, addresses, Social Security numbers, or financial records, posing risks of identity theft, fraud, or phishing attacks. While the company has not confirmed the attack vector (e.g., phishing, system vulnerability, or insider threat), the breach underscores vulnerabilities in safeguarding internal workforce data. The lack of transparency regarding the scope and cause further complicates risk assessment for affected employees. Regulatory scrutiny and potential legal repercussions may follow, given the sensitivity of the exposed information and compliance obligations under data protection laws like CCPA (California Consumer Privacy Act).

The Maine Office of the Attorney General reported a data breach involving Henry Schein, Inc. on December 6, 2023. The breach occurred on September 27, 2023, and was discovered on October 14, 2023, following an external system breach involving hacking, affecting approximately 29,112 individuals. Identity theft protection services were offered for 24 months through Experian's IdentityWorks.