California Pacific Medical Center

The California Office of the Attorney General reported on January 23, 2015, that California Pacific Medical Center (CPMC) discovered an employee accessed patient records without a business or treatment purpose, affecting 844 patients. The improper access occurred between October 2013 and October 2014 and involved patient demographics, clinical information, and prescription information, though no full Social Security numbers or financial information was accessed.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-48217

TPRM report: https://www.rankiteo.com/company/california-pacific-medical-center-research-institute

"id": "cal719072625",
"linkid": "california-pacific-medical-center-research-institute",
"type": "Breach",
"date": "10/2013",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 844,
                        'industry': 'Healthcare',
                        'location': 'California',
                        'name': 'California Pacific Medical Center',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'number_of_records_exposed': 844,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Patient demographics',
                                              'Clinical information',
                                              'Prescription information']},
 'date_detected': '2015-01-23',
 'date_publicly_disclosed': '2015-01-23',
 'description': 'An employee at California Pacific Medical Center accessed '
                'patient records without a business or treatment purpose, '
                'affecting 844 patients. The improper access occurred between '
                'October 2013 and October 2014 and involved patient '
                'demographics, clinical information, and prescription '
                'information, though no full Social Security numbers or '
                'financial information was accessed.',
 'impact': {'data_compromised': ['Patient demographics',
                                 'Clinical information',
                                 'Prescription information']},
 'motivation': 'Unknown',
 'references': [{'date_accessed': '2015-01-23',
                 'source': 'California Office of the Attorney General'}],
 'threat_actor': 'Employee',
 'title': 'Unauthorized Access to Patient Records at California Pacific '
          'Medical Center',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}