US Fertility, LLC

The Washington State Office of the Attorney General disclosed a ransomware attack targeting US Fertility, LLC, which occurred between August 12, 2020, and September 14, 2020. The breach impacted 47,952 Washington residents, exposing highly sensitive personal and financial data, including names, Social Security numbers, driver’s license numbers, financial records, passport numbers, and health-related information. While the attack compromised extensive personal and medical data posing severe risks of identity theft, financial fraud, and privacy violations there was no confirmed evidence of misuse at the time of reporting. The incident underscores the critical vulnerability of healthcare-related entities to cyber extortion, particularly when ransomware is deployed to encrypt and exfiltrate confidential patient records. The scale and nature of the exposed data suggest a high-severity breach with potential long-term repercussions for affected individuals, including reputational harm to the company and regulatory scrutiny under data protection laws.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10385

TPRM report: https://www.rankiteo.com/company/usfertility

"id": "usf350090625",
"linkid": "usfertility",
"type": "Ransomware",
"date": "8/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': '47,952',
                        'industry': 'Healthcare, Fertility Services',
                        'location': 'United States (Washington residents '
                                    'affected)',
                        'name': 'US Fertility, LLC',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'number_of_records_exposed': '47,952',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (includes SSNs, financial, and '
                                        'health data)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)',
                                              'Financial Data']},
 'date_publicly_disclosed': '2021-01-08',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving US Fertility, LLC due to a ransomware '
                'attack. The breach occurred between August 12, 2020, and '
                'September 14, 2020, affecting approximately 47,952 Washington '
                'residents. Compromised information included names, Social '
                "Security numbers, driver's license numbers, financial "
                'information, passport numbers, and health-related data, '
                'though there is no evidence of actual misuse.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 "Driver's license numbers",
                                 'Financial information',
                                 'Passport numbers',
                                 'Health-related data'],
            'identity_theft_risk': 'Potential (no evidence of misuse)',
            'payment_information_risk': 'Potential (financial information '
                                        'compromised)'},
 'references': [{'date_accessed': '2021-01-08',
                 'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington State '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via Washington '
                                        'State Office of the Attorney General'},
 'title': 'US Fertility, LLC Ransomware Attack and Data Breach (2020)',
 'type': 'Data Breach, Ransomware Attack'}