The California Office of the Attorney General reported that Aveanna Healthcare experienced a data breach where certain employee email accounts were accessed by an unknown actor between July 9, 2019, and August 24, 2019. Approximately 5,004 California residents were affected, with potentially compromised personal information including Social Security numbers, driver’s licenses, financial account information, medical information, and health insurance information. Written notices began mailing to affected individuals on or about February 14, 2020.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-187372
TPRM report: https://www.rankiteo.com/company/aveanna-healthcare
"id": "ave523072725",
"linkid": "aveanna-healthcare",
"type": "Breach",
"date": "7/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 5004,
'industry': 'Healthcare',
'location': 'California',
'name': 'Aveanna Healthcare',
'type': 'Healthcare Provider'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 5004,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'Driver’s licenses',
'Financial account information',
'Medical information',
'Health insurance information']},
'date_publicly_disclosed': '2020-02-14',
'description': 'The California Office of the Attorney General reported that '
'Aveanna Healthcare experienced a data breach where certain '
'employee email accounts were accessed by an unknown actor '
'between July 9, 2019, and August 24, 2019. Approximately '
'5,004 California residents were affected, with potentially '
'compromised personal information including Social Security '
'numbers, driver’s licenses, financial account information, '
'medical information, and health insurance information. '
'Written notices began mailing to affected individuals on or '
'about February 14, 2020.',
'impact': {'data_compromised': ['Social Security numbers',
'Driver’s licenses',
'Financial account information',
'Medical information',
'Health insurance information']},
'initial_access_broker': {'entry_point': 'Email Accounts'},
'references': [{'source': 'California Office of the Attorney General'}],
'response': {'communication_strategy': 'Written notices mailed to affected '
'individuals'},
'threat_actor': 'Unknown',
'title': 'Aveanna Healthcare Data Breach',
'type': 'Data Breach'}