Ambulance Tasmania's paging system suffered a data breach as "horrific" by the Health and Community Services Union, which has suggested the data dump could leave the Government open to litigation.
The attack exposed patients' personal details and conditions as well as the address of the incident, also includes a patient's HIV status, gender, and age, raising concerns it could lead to discrimination or stigmatisation.
State secretary Tim Jacobson investigated the incident and put the site off-line and work is being undertaken with the Australian Cyber Security Centre (ACSC) to pursue a shutdown should it re-emerge.
Source: https://www.abc.net.au/news/2021-01-08/patient-records-pager-messages-published-online/13041958
TPRM report: https://scoringcyber.rankiteo.com/company/ambulance-tasmania
"id": "amb104124522",
"linkid": "ambulance-tasmania",
"type": "Breach",
"date": "01/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Tasmania, Australia',
'name': 'Ambulance Tasmania',
'type': 'Government Agency'}],
'data_breach': {'personally_identifiable_information': ['personal details',
'conditions',
'HIV status',
'gender',
'age',
'address of the '
'incident'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['personal details',
'conditions',
'HIV status',
'gender',
'age',
'address of the incident']},
'description': "Ambulance Tasmania's paging system suffered a data breach "
"that exposed patients' personal details and conditions, "
'including sensitive information such as HIV status, gender, '
'and age. The incident has raised concerns about potential '
'discrimination or stigmatisation.',
'impact': {'data_compromised': ['personal details',
'conditions',
'HIV status',
'gender',
'age',
'address of the incident'],
'legal_liabilities': ['potential litigation'],
'systems_affected': ['paging system']},
'regulatory_compliance': {'legal_actions': ['potential litigation']},
'response': {'containment_measures': ['put the site off-line'],
'third_party_assistance': ['Australian Cyber Security Centre '
'(ACSC)']},
'title': 'Ambulance Tasmania Paging System Data Breach',
'type': 'Data Breach'}