Planned Parenthood Lab Test Vendor Reports 1.6 Million Record Data Breach

A lab test vendor used by Planned Parenthood centers across the country has reported a massive data breach involving the personal and health information of 1.6 million individuals, including employees and Planned Parenthood patients.

Laboratory Services Cooperative contracts with Planned Parenthood centers in 31 U.S. states to provide lab testing services. On October 27, 2024, suspicious activity was identified within its computer systems, and third-party cybersecurity experts were engaged to investigate the activity and determine the nature and scope of the activity. The investigation confirmed unauthorized access to its systems and files were acquired from its systems by an unauthorized third party, some of which contained patient and employee information. It is unclear for how long its systems were breached and if the security breach involved attempted extortion. Laboratory Services Cooperative said it has engaged a firm to conduct dark web monitoring to identify any leaked data and has yet to identify any dark web data leaks.

The initial results of the file review confirmed that the data exposed or stolen in the incident includes names, addresses, email addresses, and phone numbers, and for employees, information about dependents and beneficiaries. In addition, some or all of the following types of information may also have been involved:

• Identifiers such as Social Security numbers, driver’s license/state ID numbers, passport numbers, dates of birth, demographic data, student ID numbers, and other government identifiers.
• Medical and clinical information, including diagnosis and treatment information, medical record numbers, lab test results, patient/accession numbers, dates of service, provider names, and treatment information.
• Billing and claims information, including claim numbers, billing details, bank account details, billing codes, payment card details, balance details, and other banking and financial information.
• Health insurance information

The affected individuals have been offered either 12 or 24 months of complimentary credit monitoring and medical identity theft protection services, and are being notified by mail if they have been affected. A call center has also been established for individuals to find out more about the data breach, including if a specific Planned Parenthood center was affected. Laboratory Services Cooperative said not all Planned Parenthood centers were affected, only those that used Laboratory Services Cooperative’s lab testing services. The call center is manned from Monday to Friday, 9:00 AM to 9:00 PM ET, and can be reached on 1-855-549-2662.