MalwareHealthcareHealthcareRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedTargetedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Extend Fertility

bd_a6bc96cc7d05b60a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 20, 2021

Filed

Feb 16, 2022

To disclose

8 weeks

Affected

7state residents only

Linked

6 filings

Confidence

64%

Full breach record for Extend Fertility →

Extend Fertility notified South Carolina residents of a December 2021 ransomware incident. Unauthorized access occurred around December 15, 2021, impacting patient demographic, clinical, and financial data. The company engaged forensic experts and the FBI, restored systems, and implemented enhanced security safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 8 weeks / 58 days

Dec 15, 2021

Begins

Dec 20, 2021

Discovered

Feb 16, 2022

Filed

vs. sector median

4 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

HHS OCRbd_52de3d14d7ada3112022-02-16Candidate
Maine State AGbd_61ee999293fbe9762022-02-16Verified
Indiana State AGbd_694b6b9dfef716f22022-02-16Verified
Massachusetts State AGbd_73244bfef76f122b2022-02-16Verified

Show 1 more filing ↓up to 6d gap

New Hampshire State AGbd_91746a5a8510fdd52022-02-22 · +6dVerified

Name: Extend Fertility
norm: extend fertility
Domain: extendfertility.com

Name: Extend Fertility
norm: extend fertility
Domain: extendfertility.com
Industry: Healthcarellm

Discovered: Dec 20, 2021
Breach occurred: Dec 15, 2021
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 16, 2022
Affected individuals: 7state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified South Carolina Attorney General
Initial access: valid_credentials

During the incident: Engaged outside counsel and third-party forensic experts
Contacted the FBI to seek assistance and guidance
Secured and safely restored systems and operations
Changes made: Implementing additional safeguards to existing cybersecurity infrastructure
Enhancing employee cybersecurity training
Working with cybersecurity experts to improve cybersecurity policies, procedures, and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

HHS OCRFeb 16 · first

Maine State AGFeb 16 · first

Indiana State AGFeb 16 · first

Massachusetts State AGFeb 16 · first

South Carolina State AGFeb 16 · first · this page

New Hampshire State AG+6d

Pattern: first filing Feb 16 (NY), last Feb 22 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2022/ExtendFertility.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 16, 2022
Raw hash: bbe677620d1619e20803d9a164bc1fca06afa1671c57e1294be59a1dbfe60962

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityExtend Fertility

Victim entityExtend Fertility

Incidentdiscovered Dec 20, 2021

Stated responseEngaged outside counsel and third-party forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov