Planned Parenthood has confirmed that it was hit by a significant cyberattack from the notorious ransomware group, RansomHub. The group claims to have stolen 93GB of sensitive data from the nonprofit’s Montana branch, threatening to release the stolen information unless a ransom is paid within seven days. The cyberattack, which occurred on August 28, forced Planned Parenthood to take parts of its network offline as a precautionary measure while cybersecurity experts worked to contain the damage.
RansomHub, known for its aggressive attacks on organizations across various sectors, posted Planned Parenthood’s name on its dark web leak site shortly after the attack, showcasing confidential documents as proof of their intrusion. The group has been linked to over 200 cyberattacks this year, making it one of the most active ransomware operations in 2024. It employs a double-extortion model, encrypting systems while exfiltrating data, giving them leverage to demand ransoms from victims.
While Planned Parenthood has not yet confirmed whether any personal patient information has been compromised, the organization is working closely with cybersecurity professionals and law enforcement to investigate the breach and restore affected systems. In a statement, Martha Fuller, CEO of Planned Parenthood of Montana, acknowledged the severity of the situation but did not comment on RansomHub’s ransom demands or the specifics of the attack. Fuller expressed gratitude to Planned Parenthood staff for minimizing disruptions to patient care during the incident.
This is not the first time Planned Parenthood has been targeted by cybercriminals. In 2021, its Los Angeles branch was the victim of a ransomware attack that exposed the personal information of over 400,000 patients. With healthcare organizations increasingly targeted by hackers due to the sensitive nature of their data, the latest attack underscores the ongoing vulnerability of critical services to ransomware groups.
As the investigation continues, Planned Parenthood faces growing pressure to secure its systems and protect the sensitive data of its patients, many of whom rely on the organization for reproductive health services. With RansomHub’s reputation for following through on threats, the organization may be bracing for the potential fallout if the stolen data is leaked.
