American Indian Health & Services, Inc.

The California Office of the Attorney General reported a data breach by American Indian Health & Services, Inc. (AIHS) on May 6, 2019. The breach occurred from February 26, 2019, to March 6, 2019, when a former employee forwarded emails containing personal information of employees, patients, and vendors to a personal email account. The number of individuals affected and specific details of the compromised information are unknown.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-146968

TPRM report: https://www.rankiteo.com/company/american-indian-health-&-services-corporation

"id": "ame326072725",
"linkid": "american-indian-health-&-services-corporation",
"type": "Breach",
"date": "2/2019",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'California',
                        'name': 'American Indian Health & Services, Inc.',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'type_of_data_compromised': ['Employee Information',
                                              'Patient Information',
                                              'Vendor Information']},
 'date_detected': '2019-05-06',
 'date_publicly_disclosed': '2019-05-06',
 'description': 'A former employee forwarded emails containing personal '
                'information of employees, patients, and vendors to a personal '
                'email account.',
 'impact': {'data_compromised': ['Employee Information',
                                 'Patient Information',
                                 'Vendor Information']},
 'motivation': 'Unknown',
 'references': [{'date_accessed': '2019-05-06',
                 'source': 'California Office of the Attorney General'}],
 'threat_actor': 'Former Employee',
 'title': 'Data Breach at American Indian Health & Services, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}