Cano Health, LLC, a leading population health management company and operator of primary care medical centers in Florida, experienced a security incident that may have compromised certain personal information.
The breach happened on April 13, 2020.
Three employee email accounts were accessed by an unknown perpetrator, and messages from these accounts were forwarded to an outside email account without its knowledge.
The information in the compromised email accounts during that time included patient names, dates of birth, contact information, healthcare information, insurance information, social security numbers, government identification numbers, and/or financial account numbers.
Source: https://canohealth.com/news/blog/cano-health-advises-patients-of-potential-data-security-issue/
TPRM report: https://scoringcyber.rankiteo.com/company/canohealth
"id": "can23503123",
"linkid": "canohealth",
"type": "Breach",
"date": "04/2020",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Florida',
'name': 'Cano Health, LLC',
'type': 'Healthcare Provider'}],
'attack_vector': 'Email Compromise',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['patient names',
'dates of birth',
'contact information',
'healthcare information',
'insurance information',
'social security numbers',
'government identification '
'numbers',
'financial account numbers']},
'date_detected': '2020-04-13',
'description': 'Cano Health, LLC, a leading population health management '
'company and operator of primary care medical centers in '
'Florida, experienced a security incident that may have '
'compromised certain personal information.',
'impact': {'data_compromised': ['patient names',
'dates of birth',
'contact information',
'healthcare information',
'insurance information',
'social security numbers',
'government identification numbers',
'financial account numbers']},
'initial_access_broker': {'entry_point': 'Email Accounts'},
'threat_actor': 'Unknown',
'title': 'Cano Health Data Breach',
'type': 'Data Breach'}