Genomic data is DNA-derived information from tests, sequencing, or clinical records. It can reveal disease risks, ancestry, family relationships, and other highly sensitive traits. Unlike a password or account number, this data is hard to fully anonymize because parts of it may still be re-identified when combined with other datasets.
In cyber security, genomic data is a high-value target for extortion, identity abuse, and long-term privacy harm. A breach of a lab, clinic, or vendor can expose patient results, specimen metadata, or linked identifiers, creating risks that outlast the incident itself. Defenses include strong access control, encryption, logging, careful vendor management, and minimizing data sharing. Even when de-identified, genomic records should be treated as sensitive and handled with strict governance.