Planned Parenthood Los Angeles (PPLA) is notifying individuals whose information was involved in a recent cybersecurity incident.
On October 17, 2021, we identified suspicious activity on our computer network. We immediately took our systems offline, notified law enforcement, and a third-party cybersecurity firm was engaged to assist in our investigation. The investigation is ongoing, but to date has determined that an unauthorized person gained access to our network between October 9, 2021 and October 17, 2021, installed malware/ransomware and exfiltrated some files from our systems during that time.
As soon as we determined what files were involved, PPLA began a review of those files to determine whether any contained patient information. On November 4, we identified files that contained certain patients’ names, and one or more of the following: dates of birth, addresses, insurance identification numbers, and clinical data, such as diagnosis, treatment, or prescription information.
While at this time, we have no evidence that any information involved in this incident has been used for fraudulent purposes, out of an abundance of caution, PPLA is mailing notification letters to patients whose information was contained in documents that were exfiltrated from our systems. We also encourage patients to review statements from their healthcare providers or health insurers and contact them immediately if they see charges for services they did not receive.
We take the safeguarding of patients’ information extremely seriously, and deeply regret that this incident occurred and for any concern this may cause. In response to this incident, PPLA has taken steps to enhance our existing security measures and to help protect the information in our care, including increasing our network monitoring, engaging an external cybersecurity firm, and hiring additional cybersecurity resources and talent to our team.
For individuals seeking more information or who have questions, please call the dedicated toll-free helpline set up specifically for this purpose at (866) 663-6283, Monday through Friday, 6:00 AM to 8:00 PM, and Saturday and Sunday, 8:00 AM – 5:00 PM, PST, excluding major U.S. holidays. Callers should provide Engagement Number B021850.