Birth Choice of San Marcos Data Breach Investigation

Recently, Birth Choice reported to the Attorney General of California that its third-party vendor, National Diagnostic Imaging (NDI) had experienced a data breach in which the sensitive personal information and protected health information belonging to Birth Choice patients in its systems may have been accessed. According to the breach notice, on August 19, 2024, Birth Choice was notified that NDI had experienced a network disruption that impacted their ability to access certain files on their network.¹ As a result, NDI launched an investigation to determine the nature of the incident.

Through its investigation, NDI learned that sensitive personal information in its systems may have been compromised by an unauthorized actor between February 19, 2024, and March 27, 2024. As a result, NDI began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On October 15, 2024, NDI completed this review and shared relevant information with Birth Choice. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Date of birth
• LMP
• Pertinent clinical information
• Biometrics for the radiologist’s diagnosis

On October 22, 2024, Birth Choice plans to mail data breach notification letters to impacted individuals. Based on the breach notice sent to California residents, Birth Choice is providing affected individuals with a list of the specific type of sensitive information impacted. A link to the form breach notification letters that Birth Choice filed with the Attorney General of California is below.