Shady Grove Data Breach/Ransomware attack on Shady Grove's systems

[Anonymous]

Got a letter yesterday notifying me that their records were breached in August 2020, ransomware attack shortly thereafter. They only now just let me know about it--6 months later so now hackers have had my personal info for 6 months and could have done terrible damage.
https://techcrunch.com/2020/11/26/us-fertility-ransomware-attack/

i have frozen my credit now all 3 credit reporting agencies.
Why do these companies only do something AFTER the fact? And why do they wit so long to tell heir customers? Wait, I know, they are busy covering their a**.

[Anonymous]

Same here. I already had my accounts frozen due to the numerous other breaches, but this one said they did get my dob and social. I don’t understand why everything is done in the computer when it’s seems we aren’t ready to protect that info.

[Anonymous]

Did SG say if all clients were affected or just some? I have not received any correspondence from them about a hack and I had consultations with them this spring...

[Anonymous]

Anonymous wrote:Did SG say if all clients were affected or just some? I have not received any correspondence from them about a hack and I had consultations with them this spring...

I haven't been with them since maybe 2016? I got a letter a few days ago. Only popped on the infertility forum to see if there was more info about this.

[Anonymous]

Yikes! I left SG in 2018 and haven’t heard anything.

[Anonymous]

I left Shandy Grove in 2014 and got the data breach notice in the mail today. It said I was directly affected with DOB, SSN and patient number (MPI).

[Anonymous]

Anonymous wrote:I left Shandy Grove in 2014 and got the data breach notice in the mail today. It said I was directly affected with DOB, SSN and patient number (MPI).

Oh and my name, too!

[Anonymous]

Anonymous wrote:Did SG say if all clients were affected or just some? I have not received any correspondence from them about a hack and I had consultations with them this spring...

PP here...I just received a notice in the mail too via USPS. Return address on the envelope is USFertility so you don’t overlook it.

[Anonymous]

My dh got that letter last week. It said his name and patient number were in the impacted files and his date of birth may have been, too. We consulted with them in 2006, but decided not to use their services.

[Anonymous]

Yeah I haven't been there since 2015 and got a letter. My credit is locked down already but this is all so tiresome.

[Anonymous]

I got the letter today and DH got one last week. The last time we were there was 2013. A google search revealed that the FBI determined the info was put on the dark web. I am freezing my credit tomorrow, but the hackers have had four months with my SSN, etc now. I am very angry that Shady Grove didn’t inform people right away.

[Anonymous]

Anonymous wrote:My dh got that letter last week. It said his name and patient number were in the impacted files and his date of birth may have been, too. We consulted with them in 2006, but decided not to use their services.

My letter said only these 2 pieces of PII, but my DH’s said SSN as well. Strange that it seems they didn’t get the same info from all affected by the breach.

[Anonymous]

Anonymous wrote:Yikes! I left SG in 2018 and haven’t heard anything.

Spoke too soon. We both got letters today.

[Anonymous]

if it helps anyone to feel better, nothing weird has happened on my credit even with this. My husband (software engineer) says he wouldn't worry a lot because ransomware attacks are typically to make money off the attack and maybe not so likely to actually be people wanting to use the info collected. They want the ransom, in other words.