The patient information of more than four million patients of Advocate Health Care was exposed in a data security incident after the theft of four computers.
The stolen computers contained information like patients' names, addresses, social security numbers, and dates of birth.
A class action lawsuit filed case against the health system for neglecting the patient's information.
Source: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6179506/
TPRM report: https://scoringcyber.rankiteo.com/company/advocate-health-care
"id": "adv161316522",
"linkid": "advocate-health-care",
"type": "Breach",
"date": "07/2013",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'More than four million patients',
'industry': 'Healthcare',
'name': 'Advocate Health Care',
'type': 'Healthcare Provider'}],
'attack_vector': 'Physical Theft',
'data_breach': {'number_of_records_exposed': 'More than four million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'description': 'The patient information of more than four million patients of '
'Advocate Health Care was exposed in a data security incident '
'after the theft of four computers. The stolen computers '
"contained information like patients' names, addresses, social "
'security numbers, and dates of birth. A class action lawsuit '
'was filed against the health system for neglecting the '
"patient's information.",
'impact': {'data_compromised': ["Patients' names",
'Addresses',
'Social Security Numbers',
'Dates of Birth'],
'identity_theft_risk': 'High',
'legal_liabilities': 'Class Action Lawsuit',
'systems_affected': 'Four Computers'},
'motivation': 'Unknown',
'regulatory_compliance': {'legal_actions': 'Class Action Lawsuit'},
'title': 'Data Security Incident at Advocate Health Care',
'type': 'Data Breach'}