ARcare

A malware incident with ARcare exposed a limited amount of personal and/or medical information of its patients.

The attack infected its systems with a malware infection and caused a temporary disruption to services.

ARcare immediately shut down its systems and worked to secure its systems and investigated the incident, however an unauthorised party had already acquired some of it patients.

The exposed information included the personal information like names, contact numbers, medical and health information, Social Security numbers, financial account information, medical treatment information, prescription information, medical diagnosis or condition information, and health insurance information.

Source: https://www.prnewswire.com/news-releases/re-arcare--notice-of-data-privacy-incident-301532031.html

TPRM report: https://www.rankiteo.com/company/arcare

"id": "arc11620522",
"linkid": "arcare",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'ARcare',
                        'type': 'Healthcare'}],
 'attack_vector': 'Malware infection',
 'data_breach': {'personally_identifiable_information': 'yes',
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personal information',
                                              'medical and health information',
                                              'Social Security numbers',
                                              'financial account information',
                                              'medical treatment information',
                                              'prescription information',
                                              'medical diagnosis or condition '
                                              'information',
                                              'health insurance information']},
 'description': 'A malware incident with ARcare exposed a limited amount of '
                'personal and/or medical information of its patients. The '
                'attack infected its systems with a malware infection and '
                'caused a temporary disruption to services. ARcare immediately '
                'shut down its systems and worked to secure its systems and '
                'investigated the incident, however an unauthorised party had '
                'already acquired some of it patients. The exposed information '
                'included the personal information like names, contact '
                'numbers, medical and health information, Social Security '
                'numbers, financial account information, medical treatment '
                'information, prescription information, medical diagnosis or '
                'condition information, and health insurance information.',
 'impact': {'data_compromised': ['names',
                                 'contact numbers',
                                 'medical and health information',
                                 'Social Security numbers',
                                 'financial account information',
                                 'medical treatment information',
                                 'prescription information',
                                 'medical diagnosis or condition information',
                                 'health insurance information'],
            'operational_impact': 'temporary disruption to services'},
 'response': {'containment_measures': 'shut down its systems',
              'remediation_measures': 'worked to secure its systems and '
                                      'investigated the incident'},
 'title': 'Malware Incident at ARcare',
 'type': 'Malware'}