OB-GYN Associates Confirms Data Breach Affecting Over 60,000 People

Reno, Nevada-based OB-GYN Associates reported that in August, cyber criminals infiltrated its internal systems, compromising and gaining access to the personal information of both employees and patients.

 

OB-GYN Associates provides comprehensive women’s healthcare services, including gynaecological and obstetric care, menopausal management, and ultrasound services.

 

In a data security incident notice filed with the Office of Maine Attorney General, OB-GYN Associates said that on August 7, it identified unauthorised access within its internal network. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected systems and notified relevant law enforcement authorities about the same.

 

“Our investigation, which was completed on September 29, 2025, subsequently determined that an unauthorised third party acquired certain individual personal information during this incident,” OB-GYN Associates said.

 

The compromised data included  names, Social Security numbers, driver’s license driver’s license numbers, and medical information. The filing with the Maine state regulator’s office also states that the healthcare provider has identified at least 62,238 individuals affected by the incident.

 

“We wiped and rebuilt affected systems and have taken steps to bolster our network security. We are also reviewing and altering our policies, procedures, and network security software relating to the security of our systems and servers, as well as how we store and manage data. Further, we notified the FBI and are fully cooperating with their investigation,” OB-GYN Associates added.

 

While the healthcare provider found no evidence of the compromise data being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general. 

 

It has also offered one year of complimentary identity protection and credit monitoring services through TransUnion to all affected individuals.

 

 

 

The INC Ransom ransomware group claimed responsibility for the cyber attack and listed OB-GYN Associates as a victim on its data leak site. The group claimed to be in possession of  the organisation’s data and threatened to leak it unless its ransom demands were met.