The Maine Office of the Attorney General reported that BrightSpring Health Services experienced an external system breach (hacking) from March 12 to 13, 2023. The breach potentially affected 535,203 individuals, with specific confirmed information including Social Security numbers. Written notifications were issued on August 11, 2023, and identity theft protection services were offered for 12 months through Kroll.
TPRM report: https://www.rankiteo.com/company/brightspringhealth
"id": "bri1025072825",
"linkid": "brightspringhealth",
"type": "Breach",
"date": "3/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'customers_affected': 535203,
'industry': 'Healthcare',
'name': 'BrightSpring Health Services',
'type': 'Healthcare'}],
'attack_vector': 'Hacking',
'data_breach': {'number_of_records_exposed': 535203,
'personally_identifiable_information': 'Social Security '
'numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Social Security numbers'},
'date_detected': '2023-03-12',
'date_publicly_disclosed': '2023-08-11',
'description': 'The Maine Office of the Attorney General reported that '
'BrightSpring Health Services experienced an external system '
'breach (hacking) from March 12 to 13, 2023. The breach '
'potentially affected 535,203 individuals, with specific '
'confirmed information including Social Security numbers. '
'Written notifications were issued on August 11, 2023, and '
'identity theft protection services were offered for 12 months '
'through Kroll.',
'impact': {'data_compromised': ['Social Security numbers'],
'identity_theft_risk': 'High'},
'references': [{'date_accessed': '2023-08-11',
'source': 'Maine Office of the Attorney General'}],
'response': {'communication_strategy': 'Written notifications issued on '
'August 11, 2023',
'third_party_assistance': ['Kroll']},
'title': 'BrightSpring Health Services Data Breach',
'type': 'Data Breach'}