The mental health authority for Bexar County suffered from a data breach incident after that the former employee stole a bevy of sensitive data more than a year ago.
The compromised data includes names, addresses, dates of birth, social security numbers, medical records numbers, dates of services, referral information, progress notes, types of services, diagnoses, medications, lab and toxicology reports, autopsy reports, death certificates, treatment plans, discharge and death summaries and collateral hospital information.
The facility announced that it is improving security and that it is working with law enforcement and security professionals to inform affected patients.
Source: https://apnews.com/article/health-san-antonio-archive-mental-health-6e158c87ba3a4967bf13147894722c6a
TPRM report: https://scoringcyber.rankiteo.com/company/bexarcounty
"id": "bex1126323",
"linkid": "bexarcounty",
"type": "Data Leak",
"date": "12/2017",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Mental Health',
'location': 'Bexar County',
'name': 'Bexar County Mental Health Authority',
'type': 'Healthcare'}],
'attack_vector': 'Insider Threat',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Medical Information']},
'description': 'The mental health authority for Bexar County suffered from a '
'data breach incident after a former employee stole a bevy of '
'sensitive data more than a year ago.',
'impact': {'data_compromised': ['names',
'addresses',
'dates of birth',
'social security numbers',
'medical records numbers',
'dates of services',
'referral information',
'progress notes',
'types of services',
'diagnoses',
'medications',
'lab and toxicology reports',
'autopsy reports',
'death certificates',
'treatment plans',
'discharge and death summaries',
'collateral hospital information']},
'motivation': 'Data Theft',
'response': {'communication_strategy': 'Informing Affected Patients',
'law_enforcement_notified': 'Yes',
'remediation_measures': 'Improving Security',
'third_party_assistance': 'Security Professionals'},
'threat_actor': 'Former Employee',
'title': 'Data Breach at Bexar County Mental Health Authority',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Access by Former Employee'}