LCR Health

The Maryland Office of the Attorney General disclosed a data breach affecting LCR Health and its third-party payment processor, 1ShoppingCart.com, on October 30, 2020. The incident resulted in the potential exposure of sensitive personal information, including names, addresses, phone numbers, email addresses, and payment card details of an unspecified number of individuals. While the exact scope of the breach remains undetermined, the compromised data suggests a significant risk of financial fraud, identity theft, and unauthorized transactions for affected customers. The breach highlights vulnerabilities in LCR Health’s payment processing ecosystem, raising concerns over data protection compliance and the security measures employed by its vendors. No immediate evidence of misuse was reported, but the exposure of payment card information a high-value target for cybercriminals poses long-term reputational and financial risks for the company and its customers.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac6d208a-b7bb-4206-b704-6e999c52bb2c.shtml

TPRM report: https://www.rankiteo.com/company/association-for-sickle-cell-lower-chattahoochee-region

"id": "ass359090725",
"linkid": "association-for-sickle-cell-lower-chattahoochee-region",
"type": "Breach",
"date": "8/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'name': 'LCR Health',
                        'type': 'Organization'},
                       {'customers_affected': 'Unknown',
                        'industry': 'E-commerce / Payment Services',
                        'name': '1ShoppingCart.com',
                        'type': 'Payment Processor'}],
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Payment Card Information']},
 'date_publicly_disclosed': '2020-10-30',
 'description': 'The Maryland Office of the Attorney General reported a data '
                'breach involving LCR Health and its payment processor '
                '1ShoppingCart.com on October 30, 2020. The breach potentially '
                'exposed personal information, including names, addresses, '
                'phone numbers, email addresses, and payment card information, '
                'affecting an unknown number of individuals.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'phone numbers',
                                 'email addresses',
                                 'payment card information'],
            'identity_theft_risk': 'Potential',
            'payment_information_risk': 'Potential'},
 'references': [{'date_accessed': '2020-10-30',
                 'source': 'Maryland Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maryland Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Data Breach at LCR Health and 1ShoppingCart.com',
 'type': 'Data Breach'}