Cancer Treatment Centers of America sent notification letters to patients whose protected health information was in an employee email account that was compromised by a phishing attack.
The attacker was potentially able to access the account for two days, the investigation did not confirm whether any EPHI had actually been accessed, so CTCA is notifying all those potentially affected.
CTCA didn't offered those affected by this newest incident any complimentary services because no SSN or financial account information was exposed.
It was unclear that how many patients were impacted by the incident.
"id": "CAN214619323",
"linkid": "cancer-treatment-centers-of-america",
"type": "Data Leak",
"date": "05/2019",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"