Caravus

Caravus, an independent healthcare insurance broker was also impacted in the Netgain Technology breach.

The incident destroyed some legacy Caravus data on an old server following a data migration it oversaw in 2015.

The attackers acquired some individuals’ personal information that Caravus maintained on behalf of their employers in or before 2016 including names, addresses, Social Security numbers, and/or health information, as well as financial account information and/or driver’s license numbers.

Source: https://www.databreaches.net/caravus-impacted-by-netgain-technology-breach-because-vendor-failure-to-destroy-legacy-data/

TPRM report: https://scoringcyber.rankiteo.com/company/caravus

"id": "car051241022",
"linkid": "caravus",
"type": "Breach",
"date": "05/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Caravus',
                        'type': 'Independent healthcare insurance broker'}],
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'Social Security '
                                                         'numbers',
                                                         'driver’s license '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Health Information',
                                              'Financial Information']},
 'description': 'Caravus, an independent healthcare insurance broker, was '
                'impacted in the Netgain Technology breach. The incident '
                'destroyed some legacy Caravus data on an old server following '
                'a data migration it oversaw in 2015. The attackers acquired '
                'some individuals’ personal information that Caravus '
                'maintained on behalf of their employers in or before 2016 '
                'including names, addresses, Social Security numbers, and/or '
                'health information, as well as financial account information '
                'and/or driver’s license numbers.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'health information',
                                 'financial account information',
                                 'driver’s license numbers'],
            'systems_affected': ['Old server']},
 'title': 'Caravus Data Breach via Netgain Technology',
 'type': 'Data Breach'}