The California Office of the Attorney General reported that California Correctional Health Care Services (CCHCS) experienced a data breach on February 26, 2024, involving the inadvertent disclosure of protected health information (PHI) due to an email sent to an unauthorized recipient. The breach potentially affected personal data such as last names, CDCR numbers, and medical information of patients. CCHCS took immediate action to mitigate risks and ensured that the unauthorized recipient was instructed to delete the email containing the PHI.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-582371
TPRM report: https://www.rankiteo.com/company/california-correctional-health-care-services
"id": "cal329072925",
"linkid": "california-correctional-health-care-services",
"type": "Breach",
"date": "2/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'California',
'name': 'California Correctional Health Care Services '
'(CCHCS)',
'type': 'Government Agency'}],
'attack_vector': 'Email',
'data_breach': {'personally_identifiable_information': ['last names',
'CDCR numbers',
'medical information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['PHI']},
'date_detected': '2024-02-26',
'description': 'The California Office of the Attorney General reported that '
'California Correctional Health Care Services (CCHCS) '
'experienced a data breach on February 26, 2024, involving the '
'inadvertent disclosure of protected health information (PHI) '
'due to an email sent to an unauthorized recipient. The breach '
'potentially affected personal data such as last names, CDCR '
'numbers, and medical information of patients. CCHCS took '
'immediate action to mitigate risks and ensured that the '
'unauthorized recipient was instructed to delete the email '
'containing the PHI.',
'impact': {'data_compromised': ['last names',
'CDCR numbers',
'medical information']},
'post_incident_analysis': {'root_causes': ['Human Error']},
'references': [{'source': 'California Office of the Attorney General'}],
'response': {'containment_measures': ['Instructed unauthorized recipient to '
'delete the email']},
'title': 'CCHCS Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Human Error'}