The Better Outcomes Registry & Network (BORN) Ontario healthcare organization has disclosed a data breach impacting approximately 3.4 million individuals. BORN Ontario is a “perinatal and child registry that collects, interprets, shares and protects critical data about pregnancy, birth and childhood in the province of Ontario.” The organization, in a cybersecurity incident notice, stated that the breach was caused by the Progress MOVEit campaign that exploited the zero-day vulnerability tracked as CVE-2023-34362 and noted that unauthorized copies of files containing personal health information (PHI) was exfiltrated. The impacted PHI was obtained from a “large network of mostly Ontario health care facilities and providers regarding fertility, pregnancy, newborn and child health care offered between January 2010 and May 2023” and those impacted were described as individuals seeking pregnancy care and newborns born in Ontario between January 2010 and May 2023. The stolen information includes the following data types: full name, home address, postal code, date of birth, and health card number. The following data was exposed for particular care treatments: dates of service/care, lab test results, pregnancy risk factors, type of birth, procedures, and pregnancy/birth outcomes. BORN Ontario emphasized that there is currently no evidence of misuse and no signs of the exfiltrated data being posted or offered for sale on the dark web. CTIX analysts will continue to monitor the BORN Ontario data breach and organizations impacted by the Cl0p MOVEit campaign.