AffordaCare Urgent Care Clinic, a walk-in urgent care clinic network in Texas, was cyberattacked by Maze team.
The attackers claimed to have exfiltrated more than 40 GB of data, including protected health information.
Maze Team provided samples of the data they had stolen.
The publicly available files included patient insurance claim forms, workers compensation documentation, employee payroll information, and other files.
The files in the data dump contained patients’ full names, Social Security numbers, dates of birth, diagnosis code, treatment code, patient address and phone numbers, relevant medical history and reason for visit, billing information, and insurance policy information among the data types.
Source: https://www.databreaches.net/urgent-care-walk-in-centers-in-texas-and-florida-suffer-cyberattacks/
TPRM report: https://scoringcyber.rankiteo.com/company/affordacare-urgent-care-clinic
"id": "aff191231222",
"linkid": "affordacare-urgent-care-clinic",
"type": "Data Leak",
"date": "03/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Texas',
'name': 'AffordaCare Urgent Care Clinic',
'type': 'Healthcare'}],
'data_breach': {'data_exfiltration': True,
'file_types_exposed': ['Patient insurance claim forms',
'Workers compensation documentation',
'Employee payroll information'],
'personally_identifiable_information': ['Full names',
'Social Security '
'numbers',
'Dates of birth',
'Diagnosis code',
'Treatment code',
'Patient address and '
'phone numbers',
'Relevant medical '
'history and reason '
'for visit',
'Billing information',
'Insurance policy '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Patient insurance claim forms',
'Workers compensation '
'documentation',
'Employee payroll information']},
'description': 'AffordaCare Urgent Care Clinic, a walk-in urgent care clinic '
'network in Texas, was cyberattacked by Maze team. The '
'attackers claimed to have exfiltrated more than 40 GB of '
'data, including protected health information. Maze Team '
'provided samples of the data they had stolen. The publicly '
'available files included patient insurance claim forms, '
'workers compensation documentation, employee payroll '
'information, and other files. The files in the data dump '
'contained patients’ full names, Social Security numbers, '
'dates of birth, diagnosis code, treatment code, patient '
'address and phone numbers, relevant medical history and '
'reason for visit, billing information, and insurance policy '
'information among the data types.',
'impact': {'data_compromised': ['Patient insurance claim forms',
'Workers compensation documentation',
'Employee payroll information']},
'motivation': 'Data Exfiltration',
'ransomware': {'data_exfiltration': True},
'threat_actor': 'Maze Team',
'title': 'AffordaCare Urgent Care Clinic Cyberattack',
'type': 'Data Breach'}