Embryology Data Breach Follows Fertility Clinic Ransomware Hit

[silversurfer]

A fertility clinic serving the Atlanta area has been hit with a ransomware attack that also exposed private health information for 38,000 of its patients.
 
Reproductive Biology Associates (RBA), along with its affiliate My Egg Bank North America, is a well-known pioneer in in-vitro fertilization (IVF). After launching in 1983 as Georgia’s first IVF program, it became first on the East Coast to achieve pregnancy from a frozen embryo, and the first in the Western Hemisphere to report a birth from frozen donor eggs. MyEggBank, meanwhile, is the largest network of donor egg banks and client practices in North America, according to its website.
 
RBA disclosed the breach on Friday. The company said that cyberattackers were able to infiltrate its network on April 7, before moving laterally to a server housing sensitive patient information three days later, on April 10. RBA discovered the attack on April 16.
 
“We discovered that a file server containing embryology data was encrypted and therefore inaccessible,” according to the notice. “We quickly determined that this was the result of a ransomware attack and shut down the affected server, thus terminating the actor’s access, within the same business day.”

Read more: Embryology Data Breach Follows Fertility Clinic Ransomware Hit | Threatpost