Two anonymous patients being treated by fertility clinics operated by US Fertility LLC are suing the company following notification that their information may have been compromised in a ransomware attack that affected US Fertility servers and workstations. 

On January 8, 2021, US Fertility notified patients of the incident that allegedly compromised patients’ names, Social Security numbers, financial information, health insurance information and medical information. According to the lawsuit, the incident took place between August 12 and September 14, 2020.

The patients allege that US Fertility did not use reasonable security procedures and practices to protect the information, and they seek to represent those who were affected by the incident. The plaintiffs seek damages, attorneys’ fees and costs and are requesting that all patients’ personal information and protected health information be destroyed unless US Fertility can demonstrate why it should retain the information.