Planned Parenthood has become the latest target in a recent ransomware attack in its Montana branch.
What happened
On August 28, 2024, Planned Parenthood of Montana, a reproductive healthcare provider became the target of a ransomware attack by the group known as RansomHub. The attack involved the theft of approximately 93 GB of data. Ransomhub is a ransomware group that has been active since February 2024 and has already conducted over 200 attacks.
Planned Parenthood was added to its data leak site on September 4, 2024. The group published screenshots of administrative, financial, and legal documents as proof of the breach. Planned Parenthood took measures to isolate parts of its network to prevent further unauthorized access.
What was said
Planned Parenthood of Montana CEO, Martha Fuller told SecurityWeek, “On August 28, 2024, Planned Parenthood of Montana (PPMT) identified a cybersecurity incident affecting our IT systems. We immediately implemented our incident response protocols, including taking portions of our network offline as a proactive security measure.”
Why it matters
Planned Parenthood has been at the center of the debates around reproductive rights in the United States since the overturning of Roe v Wade. The shifts in state laws and disparities in the protection of reproductive rights across the country mean that the compromise of health data is more complex. The breach itself has put a particularly sensitive set of information at risk, and due to Planned Parenthood's status, the risk of RansomHub exploding more data becomes elevated.
Related: HIPAA Compliant Email: The Definitive Guide
FAQs
What is Roe v Wade?
A landmark 1973 Supreme Court case that established a legal right to abortion under the US Constitution.
What is a cyberattack?
A deliberate attempt to breach the information system of an individual or organization.
What is ransomware?
A type of malicious software designed to block access to a computer system or data.
Kirsten Peremore
