Deliberate Parenthood has confirmed it suffered a cyberattack affecting its IT programs, forcing it to take components of its infrastructure offline to include the harm.
Deliberate Parenthood is a New York-based nonprofit group that gives a spread of reproductive well being care companies, training, and advocacy for contraception. It is likely one of the largest suppliers of reproductive and sexual well being companies in the USA.
Martha Fuller, CEO and President of Deliberate Parenthood of Montana, instructed BleepingComputer that the cybersecurity incident occurred in late August and the group is presently investigating its precise scope and affect.
“On August 28, 2024, Deliberate Parenthood of Montana (PPMT) recognized a cybersecurity incident affecting our IT programs,” Fuller mentioned.
“We instantly carried out our incident response protocols, together with taking parts of our community offline as a proactive safety measure.”
Fuller notes that the response of Deliberate Parenthood of Montana’s IT employees was speedy and praised their ongoing system restoration efforts.
RansomHub claims the assault
The RansomHub ransomware group claimed duty yesterday for the assault at Deliberate Parenthood, threatening to leak 93GB of knowledge allegedly stolen from the group’s programs in six days.
The risk actors printed numerous confidential paperwork on their extortion portal on the darkish internet as proof of their claims.
Supply: BleepingComputer
Final week, the FBI, CISA, the Multi-State Data Sharing and Evaluation Middle (MS-ISAC), and the Division of Well being and Human Companies (HHS) issued a joint advisory about RansomHub’s pattern of focusing on healthcare organizations, of which that is one other instance.
Concerning RansomHub’s allegations, Fuller instructed BleepingComputer that they’re monitoring the state of affairs and have knowledgeable the FBI accordingly.
“We’re conscious of the RansomHub put up, and wish to guarantee our group that we’re taking this matter very severely. We’ve reported this incident to federal legislation enforcement, and can assist their investigation.” – Fuller | PPMT
Contemplating the big selection of reproductive and sexual healthcare companies supplied by Deliberate Parenthood, together with entry to contraception, abortion care, and hormone remedy, an information breach inside the group may have vital privateness issues for sufferers.
As of but, it has not been confirmed that any knowledge has been stolen from Deliberate Parenthood’s programs, and the investigation to find out this chance remains to be underway.
Deliberate Parenthood beforehand handled a ransomware assault once more in late 2021, when ransomware actors breached the Los Angeles division (PPLA) and stole non-public information of 400,000 sufferers.