Ontario Child Registry BORN Suffers a Data Breach

The Better Outcomes Registry & Network (BORN), a healthcare organization funded by the government of Ontario, has announced that it is among the victims of Clop ransomware’s MOVEit hacking spree. The incident occurred on May 31, 2023, affected approximately 3.4 million people, primarily newborns and pregnancy care patients who benefited from BORN services between January 2010 and May 2023.

Read: Mixin Network Suspends Operations due to a $200 Million Hack

The investigation into the breach revealed that the threat actors had managed to copy files containing sensitive information, including:

Full name
Home address
Date of birth
Social security number
Student ID number
School-related records, including degree and enrollment records and course-level data

BORN Ontario has stated that it is working with cybersecurity experts to investigate the incident and take steps to protect the affected individuals’ information. The organization has also notified the Ontario privacy commissioner and is providing affected individuals with credit monitoring and identity theft protection services for one year.

Clop Ransomware Exploits MOVEit Vulnerability to Breach BORN Ontario Child Registry

The Clop ransomware group is known for its sophisticated attacks and targeting high-profile organizations. In recent months, the group has been responsible for a number of high-profile ransomware attacks, including the attack on BORN Ontario.

The MOVEit vulnerability that was exploited in the BORN Ontario attack is a known vulnerability that the vendor has patched. However, many organizations still need to apply the patch, leaving them vulnerable to attack.

The BORN Ontario data breach is a reminder of the importance of cybersecurity and the need for organizations to take steps to protect their data from ransomware attacks. Organizations should regularly patch their systems and software, implement strong security controls, and educate their employees about cybersecurity best practices.

Keep in touch with our blog to read the latest news and innovations in the cybersecurity world.