Krystal BioTech Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Krystal BioTech, Inc. regarding its recent data breach. The Krystal BioTech data breach involved sensitive personal identifiable information belonging to an undetermined number of individuals. 


Krystal BioTech is a commercial-stage biotechnology company based in Pennsylvania. Founded in 2016, Krystal BioTech focuses on the discovery, development, and commercialization of genetic medicines for high unmet medical needs.3 Notably, Krystal BioTech is recognized for its development of VYJUVEK®, a therapy treatment for wounds in patients with Dystrophic Epidermolysis Bullosa (DEB). Today, Krystal BioTech’s wide-ranging pipeline of drug candidates is based on its proprietary redosable HSV vector technology and its unique capabilities for focal gene delivery. Headquartered in Pittsburgh, Pennsylvania, Krystal BioTech employs over 200 individuals.


In November 2023, Krystal BioTech discovered that it had experienced a data breach in which sensitive personal identifiable information may have been accessed and acquired. Through its investigation, Krystal BioTech determined that an unauthorized third party may have accessed this sensitive information on or about November 16, 2023. On January 30, 2024, Krystal BioTech began notifying individuals whose information may have been impacted. The type of information potentially exposed includes: 

  • Name 
  • Social Security number  
  • Driver’s license number 
  • Financial Account information 

If you received a breach notification letter from Krystal BioTech, Inc.:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Krystal BioTech data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Krystal BioTech, Inc.:
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: