American Medical Response, Inc.

The California Office of the Attorney General reported a data breach involving American Medical Response, Inc. (AMR) on June 11, 2019. The breach occurred on September 24 and 25, 2018, due to employee phishing that led to unauthorized access to employee email accounts containing personal information of a limited number of employees and patients, potentially affecting names, addresses, dates of birth, Social Security numbers, and driver’s license numbers.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-148040

TPRM report: https://www.rankiteo.com/company/american-medical-response-1

"id": "ame538072525",
"linkid": "american-medical-response-1",
"type": "Breach",
"date": "6/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'American Medical Response, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'dates of birth',
                                              'Social Security numbers',
                                              'driver’s license numbers']},
 'date_detected': '2019-06-11',
 'date_publicly_disclosed': '2019-06-11',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving American Medical Response, Inc. (AMR) on '
                'June 11, 2019. The breach occurred on September 24 and 25, '
                '2018, due to employee phishing that led to unauthorized '
                'access to employee email accounts containing personal '
                'information of a limited number of employees and patients, '
                'potentially affecting names, addresses, dates of birth, '
                'Social Security numbers, and driver’s license numbers.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'dates of birth',
                                 'Social Security numbers',
                                 'driver’s license numbers']},
 'initial_access_broker': {'entry_point': 'Employee email accounts'},
 'post_incident_analysis': {'root_causes': 'Employee phishing'},
 'references': [{'date_accessed': '2019-06-11',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at American Medical Response, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Employee email accounts'}