iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
RansomHub claimed it had stolen 93 GB of data from Planned Parenthood of Montana (PPMT) and threatened to publish it. The claim was reported on September 5, 2024, but the amount and alleged theft were not independently verified. PPMT confirmed that it had identified a cybersecurity incident and taken parts of its network offline; the contemporary report said the organization had not confirmed whether personal information was taken or how many people might be affected.
What did RansomHub claim?
SecurityWeek reported that RansomHub listed Planned Parenthood on its Tor-based leak site on September 4, 2024, and threatened to publish data it said it had exfiltrated. The group claimed the data totaled 93 GB. That figure and the alleged theft were claims by RansomHub, not independently verified findings in the report. SecurityWeek’s September 5, 2024 report
What did Planned Parenthood of Montana confirm?
PPMT said it identified a cybersecurity incident affecting its IT systems on August 28, 2024. It said it activated incident-response protocols, took portions of its network offline as a proactive security measure, engaged cybersecurity partners, and notified law enforcement. The organization acknowledged RansomHub’s claims but did not comment on whether they were valid. SecurityWeek
The incident described was at Planned Parenthood of Montana. It should not be treated as a confirmed breach of every Planned Parenthood affiliate or of the national federation.
#1 Best Overall
Was patient data stolen, and how many people were affected?
In SecurityWeek’s September 5, 2024 report, PPMT had not confirmed whether personal information was exfiltrated or how many people might be affected. The report did not independently establish the contents of the data RansomHub claimed to have taken. It therefore does not support a confirmed number of affected people or a verified account of stolen patient data.
What do later settlement materials establish?
A later proposed class action settlement notice concerns an August 2024 cybersecurity incident. It lists information categories that may have been impacted, including names, addresses, dates of birth, medical record numbers, insurance information, provider names, dates of service, and diagnosis, treatment, or prescription information. These are categories identified by the settlement notice, not confirmation that they were in RansomHub’s claimed 93 GB dataset. PPMT settlement notice
The notice says PPMT denied wrongdoing and liability, and that the court had not determined that PPMT did anything wrong. The settlement process does not, by itself, validate the gang’s specific data-theft or data-volume claim. PPMT settlement notice
Incident timeline
| Date | What was reported |
|---|---|
| August 28, 2024 | PPMT said it identified a cybersecurity incident, activated response protocols, and took portions of its network offline. |
| September 4, 2024 | RansomHub listed Planned Parenthood on its leak site and threatened publication of data it claimed to have exfiltrated. |
| September 5, 2024 | SecurityWeek reported the claim; PPMT had not confirmed whether personal information was exfiltrated or how many people might be affected. |
| Later | A proposed class action settlement notice described potentially affected information categories and stated that PPMT denied wrongdoing; it did not verify RansomHub’s exact claim. |
What is known about the incident now?
The available sources do not establish current forensic findings, a final incident report, or the organization’s current remediation status. A 2026 Planned Parenthood press-release listing does not provide an update on this 2024 incident. Planned Parenthood newsroom
Quick Recap
Best Value
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
