Security News > 2021 > June > Fertility clinic discloses data breach exposing patient info

A Georgia-based fertility clinic has disclosed a data breach after files containing sensitive patient information were stolen during a ransomware attack.

In a data breach notification issued by both RBA and its affiliate MyEggBank, RBA states that they first learned that they were hit by a ransomware attack on April 16th, 2021, when "a file server containing embryology data was encrypted and therefore inaccessible."

While RBA does not explicitly state that they paid a ransom, the data breach notification indicates that they had done so to get a decryptor and prevent the release of stolen data.

"In the course of our ongoing investigation of the incident, on June 7, 2021 we determined the individuals whose personal information was affected," says the RBA data breach notification.

As part of their ongoing investigation, RBA has hired an IT services firm to help determine how the attack was conducted, what data was accessed, and to secure their network and devices.

While ransomware gangs promise to delete data they steal during an attack if a ransom is paid, there is no way to know if they keep their promise.

News URL

https://www.bleepingcomputer.com/news/security/fertility-clinic-discloses-data-breach-exposing-patient-info/