Data breach at California Cryobank

California Cryobank (CCB), a large sperm donation company in the United States, recently notified its customers that it had suffered a data breach that exposed its customers' personal information. California Cryobank detected evidence of suspicious activity on its network that had occurred on April 20, 2024 and isolated the computers on the computer network.

This incident was detected by the company itself on October 4, 2024. Thereafter, an investigation was conducted in which it has been discovered that the attack exposed various personal data of thousands of customers, including names, bank accounts and routing numbers, Social Security numbers, driver's license numbers, payment card numbers and/or health insurance information. As a result, the company has notified its customers that there was an unauthorized access that obtained sensitive files stored on its systems.

Following this event, a lawsuit has been filed on March 20, 2025 stating that Cryobank failed to sufficiently protect and secure its patients' personal and health information. It alleges negligence, breach of implied contract and unjust enrichment, as well as violations of the California Unfair Competition Law and the Confidentiality of Medical Information Act. In addition, the plaintiff seeks class certification to include other individuals affected by the data breach.