Hackers Stole Health Records From 1.6 Million Planned Parenthood Patients

Another major data breach has compromised the sensitive health records of more than 1.6 million patients—including minors under 18—who received care at Planned Parenthood in more than 30 states. Laboratory Services Cooperative (LSC), which provides lab testing services to reproductive health clinics across the U.S., is notifying individuals who may have been affected by a security incident that took place in October 2024.

Planned Parenthood itself has been the target of cyberattacks in 2021 and 2024.

What happened with LSC?

According to LSC’s filing with the Maine attorney general’s office, hackers accessed its systems on Oct. 27, 2024—the breach was identified the same day—and stole the data of 1.6 million individuals. The information compromised varies from patient to patient but may include the following:

• Personal information: Name, address, email, phone number

• Medical information: Date(s) of service, diagnoses, treatment, medical record and patient numbers, lab results, provider name, treatment location

• Insurance information: Plan name and type, insurance company, member/group ID numbers

• Billing information: Claim numbers, bank account details, billing codes, payment card details, balance details

• Identifiers: Social Security number, driver’s license or ID number, passport number, date of birth, demographic data, student ID number

LSC employee data may also have been leaked, including details about dependents and beneficiaries.

What patients can do if their information was compromised

If you (or someone whose medical bills you pay) have received care at a Planned Parenthood center, you can check to see if clinics in your state are partnered with LSC for lab testing. LSC has a list on its FAQ site, and you can call the company’s service center at 855-549-2662 to verify specific clinic locations.