Advanced Urgent Care of the Florida Keys had been attacked, and patient data was dumped.
The threat actor, formerly known as m1x, branded the medical organization Malicious Defaulters since they wouldn't pay to stop data leaking after the data dump was posted on a Russian-language site notorious for data dumps.
More than 14,000 patients' personal data were included in the files, which were openly available on a well-known file-sharing website.
For some of the patients, there were numerous scans of patient records.
These were scans of reports that also had some handwritten notes and results, along with the patient's name, address, and other details, as well as the reason for the test or visit and other relevant information.
MMore than 60 days after the leak originally surfaced, this site sent Advanced Urgent Care of Florida Keys one last question, asking if they had ever informed HHS of the breach and whether they had ever informed patients.
TPRM report: https://scoringcyber.rankiteo.com/company/advanced-urgent-care-24-hr
"id": "adv21214623",
"linkid": "advanced-urgent-care-24-hr",
"type": "Data Leak",
"date": "11/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 'More than 14,000 patients',
'industry': 'Healthcare',
'location': 'Florida Keys',
'name': 'Advanced Urgent Care of the Florida Keys',
'type': 'Medical Organization'}],
'data_breach': {'data_exfiltration': True,
'file_types_exposed': ['Scans of Patient Records'],
'number_of_records_exposed': 'More than 14,000',
'personally_identifiable_information': ['Name',
'Address',
'Reason for Visit'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Patient Records',
'Handwritten Notes',
'Test Results',
'Personal Information']},
'description': 'Advanced Urgent Care of the Florida Keys experienced a data '
'breach where patient data was dumped on a Russian-language '
'site notorious for data dumps. The threat actor, formerly '
'known as m1x, branded the medical organization Malicious '
"Defaulters since they wouldn't pay to stop data leaking.",
'impact': {'data_compromised': "More than 14,000 patients' personal data"},
'motivation': 'Financial Gain',
'regulatory_compliance': {'regulatory_notifications': ['HHS']},
'threat_actor': 'm1x',
'title': 'Data Breach at Advanced Urgent Care of the Florida Keys',
'type': 'Data Breach'}