Faben Obstetrics and Gynecology

Faben Obstetrics and Gynecology is a medical practice headquartered in Florida, United States, that provides specialized obstetric and gynecological healthcare services. The organization is primarily recognized in public records due to a significant cybersecurity incident that occurred on November 21, 2018. On that date, the practice experienced a ransomware attack involving the GandCrab malware, which encrypted files on its network. The attack was detected quickly, and the practice initiated immediate mitigation efforts, including the deletion of infected files and an attempt to restore systems from existing backups. However, the backup regimen was found to be incomplete, leading to the permanent loss of certain data, notably manually scanned patient documents such as laboratory reports and other clinical information that had not been fully captured in digital backups.

The ransomware incident resulted in unauthorized access to protected health information, triggering a substantial data breach. The practice determined that the personal and health data of over 6,000 patients were compromised, necessitating formal notification to each affected individual. Furthermore, Faben Obstetrics and Gynecology reported the breach to relevant federal health authorities in compliance with regulatory requirements. The event highlighted critical vulnerabilities in data management and cybersecurity protocols within a healthcare setting, particularly the risks associated with inadequate backup procedures for essential patient records. The aftermath involved addressing the loss of irreplaceable clinical documentation and managing the legal and reputational consequences of a large-scale health data exposure. This incident serves as a documented example of the operational and compliance challenges that can confront a medical practice when targeted by ransomware, especially where backup systems fail to preserve all vital information.