Ascension Michigan notifies some of its patients of a data breach that happened between Oct. 15, 2015, and Sept. 8, 2021.
It noticed suspicious activity in its electronic health record and upon investigation found that an unauthorized individual accessed its patient information.
The compromised information included full name, date of birth, address(es), email address(es), phone number(s), health insurance information, health insurance identification number and medical records, Social Security numbers.
The Ascension Michigan offered free credit and identity theft protection-monitoring services to the affected patients.
TPRM report: https://www.rankiteo.com/company/ascensionorg
"id": "asc124828422",
"linkid": "ascensionorg",
"type": "Breach",
"date": "6/2015",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Michigan',
'name': 'Ascension Michigan',
'type': 'Healthcare Provider'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'personally_identifiable_information': ['full name',
'date of birth',
'address(es)',
'email address(es)',
'phone number(s)',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Health Information']},
'date_detected': '2021-09-08',
'description': 'Ascension Michigan notifies some of its patients of a data '
'breach that happened between Oct. 15, 2015, and Sept. 8, '
'2021. It noticed suspicious activity in its electronic health '
'record and upon investigation found that an unauthorized '
'individual accessed its patient information. The compromised '
'information included full name, date of birth, address(es), '
'email address(es), phone number(s), health insurance '
'information, health insurance identification number and '
'medical records, Social Security numbers. Ascension Michigan '
'offered free credit and identity theft protection-monitoring '
'services to the affected patients.',
'impact': {'data_compromised': ['full name',
'date of birth',
'address(es)',
'email address(es)',
'phone number(s)',
'health insurance information',
'health insurance identification number',
'medical records',
'Social Security numbers'],
'identity_theft_risk': 'High',
'systems_affected': ['Electronic Health Record']},
'response': {'communication_strategy': ['Notified affected patients'],
'remediation_measures': ['Free credit and identity theft '
'protection-monitoring services']},
'threat_actor': 'Unauthorized Individual',
'title': 'Ascension Michigan Data Breach',
'type': 'Data Breach'}