Illumina to Pay $9.8 Million in Cybersecurity Case

Illumina has agreed to pay $9.8 million to settle allegations that it violated the False Claims Act by selling genomic sequencing systems with known cybersecurity vulnerabilities to U.S. government agencies. According to the Department of Justice (DoJ), between 2016 and 2023 Illumina allegedly sold sequencing systems to federal agencies without adequately addressing security flaws in the software that runs the devices. It contends the company failed to incorporate proper cybersecurity practices in product design, development, and monitoring, and lacked sufficient personnel and quality systems to identify and mitigate security risks. Despite known vulnerabilities, the company failed to make necessary design corrections and continued to market the devices to government agencies, including those involved in sensitive research and health data management, it says.