Planned Parenthood of Montana Responds to RansomHub Cyberattack

Planned Parenthood of Montana is grappling with a severe cyberattack after the ransomware group RansomHub claimed responsibility for breaching the nonprofit’s systems and stealing sensitive data. The attack was first detected on 28 August 2024, prompting immediate action from the organisation to secure its network.

Martha Fuller, CEO and president of Planned Parenthood of Montana, confirmed the incident in a statement, detailing the swift response which included taking parts of the network offline as a precaution. "We implemented our incident response protocols immediately, including taking portions of our network offline to enhance security," Fuller said. She praised the IT and cybersecurity teams for their efforts to restore systems and investigate the breach.

RansomHub has reportedly exfiltrated 93 GB of data from the organisation and is threatening to release it unless a ransom is paid within seven days. Fuller acknowledged the ransomware group’s claims and threats but did not confirm specifics about the stolen data. She assured the public that the matter is being taken seriously and has been reported to federal law enforcement agencies.

The FBI and other federal authorities have been notified and are involved in the ongoing investigation. This breach follows a recent security alert issued by the FBI, CISA, and other US agencies about RansomHub’s aggressive targeting of various sectors, including healthcare.

This attack underscores the increasing threat posed by ransomware groups to critical organisations, including nonprofits providing essential services. Planned Parenthood of Montana joins a growing list of victims affected by these criminal activities, highlighting the urgent need for enhanced cybersecurity measures across all sectors.

The FBI has yet to respond to inquiries regarding the case, and the situation remains under active investigation.