Atlanta Perinatal Associates

Atlanta Perinatal Associates functions as a perinatal medical practice that offers obstetric and gynecologic care focused on pregnancy and maternal‑fetal health. Its services include routine prenatal examinations, diagnostic ultrasound imaging, and counseling on maternal health factors such as nutrition, substance use, and family medical history. The practice also manages administrative tasks related to health insurance billing and the collection of payment information for patient visits. Operating from its headquarters in the United States, the organization primarily serves patients residing in the Atlanta metropolitan area. The scope of its clinical work centers on providing continuous care to expectant mothers throughout pregnancy and, where applicable, during the postpartum period.

Because the practice routinely creates and stores ultrasound reports that contain patient names, birthdates, medical histories, due dates, physician details, and personal health factors, it handles a substantial volume of personally identifiable health information. This data set additionally includes health insurance details and credit card payment information collected during visits, making the organization a custodian of both clinical and financial records. As a healthcare provider in the United States, Atlanta Perinatal Associates is subject to the Health Insurance Portability and Accountability Act (HIPAA), which mandates safeguards for the confidentiality, integrity, and availability of protected health information. The sensitivity of the data it maintains was highlighted in a ransomware incident on April 9 2022, when threat actors exfiltrated years of patient files, including the aforementioned ultrasound reports, insurance data, and payment details, and subsequently leaked them publicly. Although the attackers did not encrypt the practice’s systems, the breach demonstrated the risks associated with storing extensive longitudinal patient records in perinatal healthcare environments. The leaked data encompassed multiple categories of sensitive information, including clinical details such as ultrasound reports and maternal health histories. In addition to clinical records, the breach exposed health insurance information and credit card payment details collected from patient visits. While personnel and payroll folders were mostly empty, a limited number of payroll‑related files were also present in the leaked dataset. The ransomware group asserted that they had obtained complete access to the organization’s data but chose not to deploy ransomware encryption, instead opting to threaten public disclosure. This approach highlights a shift toward data‑exfiltration‑only extortion tactics targeting healthcare providers that store extensive longitudinal records. No explicit information regarding the organization’s ownership structure, parent‑company affiliations, or employee headcount is provided in the sources consulted.