Cyber Incident Victim: North Star Fertility Partners LLC
Date:
Aug 2025
Location:
United States of America
Summary
North Star Fertility Partners LLC experienced a cybersecurity incident involving its third‑party vendor Salesloft, where unauthorized access occurred to a database hosted on the Salesforce platform. The breach exposed personal information such as names and driver’s license numbers, prompting an investigation with a cybersecurity firm and the subsequent mailing of notification letters to affected individuals.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On February 15, 2026, a press release announced that Edelson Lechtzin LLP was investigating data privacy claims on behalf of clients of North Star Fertility Partners LLC after the company learned of a cybersecurity incident. The incident occurred between August 12 and August 17, 2025, involving unauthorized access to a database hosted on the Salesforce platform that was managed by Northstar’s third‑party vendor, Salesloft. Upon discovering the breach, Northstar engaged a cybersecurity firm to conduct an investigation into the scope and nature of the unauthorized access.
The investigation determined that the compromised database may have contained personal information such as names and driver’s license numbers of individuals associated with Northstar’s fertility services. In response to these findings, Northstar began mailing notification letters to potentially affected individuals in February 2026. The notifications informed recipients of the possible exposure of their data and indicated that the company had taken steps to address the security issue with its vendor. The notification campaign commenced several months after the initial discovery of the breach.
Edelson Lechtzin LLP stated that it is pursuing a class action lawsuit to seek legal remedies for those whose sensitive personal data may have been compromised in the Northstar incident. The law firm, based in suburban Philadelphia with offices in Pennsylvania and California, focuses on class and collective litigation including data breach cases. The press release provided contact information for the firm’s representatives for individuals wishing to discuss the matter.