AllOne Health Resources, Inc. experienced a data breach after an unauthorized party gained access to sensitive consumer data contained on AllOne Health’s network.
AllOne had accidentally wired money to a fraudulent bank account because of this incident.
According to the reports, the unauthorized party had gained access to an employee’s email account, which they used to perpetrate the fraud.
The breach resulted in the names, addresses, dates of birth, driver’s license numbers, Social Security numbers, and health information of 13,669 individuals.
The company investigated the incident and reviewed all emails and attachments in the compromised email account.
Source: https://www.jdsupra.com/legalnews/allone-health-resources-inc-discovers-8173610/
TPRM report: https://scoringcyber.rankiteo.com/company/allone-health-resources
"id": "all23823722",
"linkid": "allone-health-resources",
"type": "Breach",
"date": "07/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 13669,
'industry': 'Healthcare',
'name': 'AllOne Health Resources, Inc.',
'type': 'Company'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 13669,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
'dates of birth',
'driver’s license numbers',
'Social Security numbers',
'health information']},
'description': 'AllOne Health Resources, Inc. experienced a data breach after '
'an unauthorized party gained access to sensitive consumer '
'data contained on AllOne Health’s network. The unauthorized '
'party had gained access to an employee’s email account, which '
'they used to perpetrate fraud. The breach resulted in the '
'names, addresses, dates of birth, driver’s license numbers, '
'Social Security numbers, and health information of 13,669 '
'individuals being compromised.',
'impact': {'data_compromised': ['names',
'addresses',
'dates of birth',
'driver’s license numbers',
'Social Security numbers',
'health information']},
'initial_access_broker': {'entry_point': 'Email Account Compromise'},
'motivation': 'Fraud',
'title': 'Data Breach at AllOne Health Resources, Inc.',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized access to an employee’s email '
'account'}