Birth Choice of San Marco reports third party data breach
Learn More
Birth Choice of San Marcos ("BirthChoice"), a non-profit pregnancy medical center based in San Marcos, California, reports a data breach following a cyberattack on its vendor, National Diagnostic Imaging ("NDI"). BirthChoice is a non-profit providing free, confidential pregnancy-related medical services, including ultrasounds, pregnancy testing, and post-abortion care.
In the period between February 19 and March 27, 2024, unauthorized access to BirthChoice’s data occurred due to a security incident at NDI, which specializes in radiology services for BirthChoice. NDI detected the security incident on March 16, 2024 and launched an investigation with third-party cybersecurity experts.
NDI officially notified BirthChoice about the breach on August 19, 2024. NDI provided BirthChoice with results of the breach investigation on October 15, 2024, detailing the extent of the compromised data.
The attack exposed sensitive consumer information, inlcuding:
- Names
- Dates of birth
- Last menstrual period (LMP)
- Pertinent clinical information
- Biometrics used for radiologists' diagnoses
The number of affected individuals and the nature of the attack is not disclosed.
BirthChoice has notified impacted individuals, detailing the type of information compromised. NDI and BirthChoice are implementing additional security measures to prevent future incidents.
