The California Office of the Attorney General reported a data breach involving Puma Biotechnology, Inc. on May 17, 2023. The breach occurred on June 19, 2022, when suspicious activity was discovered, potentially affecting the personal information of unspecified individuals. The breach could have exposed sensitive personal data, leading to potential financial and reputational damage for the affected individuals and the company.

Puma Biotechnology, Inc. suffered a data breach due to unauthorized access to its systems, first detected on June 19, 2022. The incident exposed sensitive personal and financial information of 1,933 individuals, including 3 Maine residents. Compromised data included names, Social Security numbers, and financial account details, heightening the risk of identity theft and financial fraud. The company responded by issuing written notifications to affected individuals on May 17, 2023, nearly a year after the breach, and offered 12 months of identity theft protection services via Equifax to mitigate potential harm. The delay in disclosure and the nature of the exposed data—particularly financial and personally identifiable information (PII)—suggest significant operational and reputational consequences for the company, as well as long-term risks for the impacted individuals, including potential fraud, credit damage, and misuse of sensitive records.