Buffalo MRI by Windsong Radiology suffered a data breach after an unauthorized party obtained access to sensitive consumer information stored on the company’s computer network.
The breach resulted in compromising the names, addresses, dates of birth, Social Security numbers, and protected health information.
Buffalo MRI secured its network and sent out data breach letters to all affected parties, informing them of the incident.
Source: https://www.jdsupra.com/legalnews/buffalo-mri-by-windsong-radiology-6929728/
TPRM report: https://scoringcyber.rankiteo.com/company/buffalo-mri
"id": "buf215631122",
"linkid": "buffalo-mri",
"type": "Breach",
"date": "12/2021",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'Buffalo MRI by Windsong Radiology',
'type': 'Healthcare'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Sent out data breach letters to all affected parties',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Dates of Birth',
'Social Security Numbers',
'Protected Health Information']},
'description': 'Buffalo MRI by Windsong Radiology suffered a data breach '
'after an unauthorized party obtained access to sensitive '
'consumer information stored on the company’s computer '
'network. The breach resulted in compromising the names, '
'addresses, dates of birth, Social Security numbers, and '
'protected health information. Buffalo MRI secured its network '
'and sent out data breach letters to all affected parties, '
'informing them of the incident.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Dates of Birth',
'Social Security Numbers',
'Protected Health Information']},
'response': {'communication_strategy': ['Sent out data breach letters to all '
'affected parties'],
'containment_measures': ['Secured the network']},
'threat_actor': 'Unauthorized Party',
'title': 'Buffalo MRI Data Breach',
'type': 'Data Breach'}