An unauthorized party gained access to the computer network of Carolina Behavioral Health Alliance, LLC through a ransomware attack and compromised sensitive consumer data.
The compromised data included names, dates of birth, level of care, provider names, addresses, health plan identification numbers, genders, and Social Security numbers of certain plan members.
CBHA upon knowing immediately put a stop to the unauthorized access that same day and initiated an investigation into the incident.
LiveWELL Health Plan, Wake Forest University Baptist Medical Center and Affiliates Employee Benefits Plan, and Wake Forest University Health and Welfare Benefit Plan are the members that were affected by the breach.
Source: https://www.jdsupra.com/legalnews/carolina-behavioral-health-alliance-llc-2147259/
TPRM report: https://www.rankiteo.com/company/carolina-behavioral-health
"id": "car15308722",
"linkid": "carolina-behavioral-health",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"{'affected_entities': [{'industry': 'Healthcare',
'name': 'LiveWELL Health Plan',
'type': 'Health Plan'},
{'industry': 'Healthcare',
'name': 'Wake Forest University Baptist Medical Center '
'and Affiliates Employee Benefits Plan',
'type': 'Health Plan'},
{'industry': 'Healthcare',
'name': 'Wake Forest University Health and Welfare '
'Benefit Plan',
'type': 'Health Plan'}],
'attack_vector': 'Ransomware',
'data_breach': {'personally_identifiable_information': ['names',
'dates of birth',
'addresses',
'genders',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Protected Health Information']},
'description': 'An unauthorized party gained access to the computer network '
'of Carolina Behavioral Health Alliance, LLC through a '
'ransomware attack and compromised sensitive consumer data.',
'impact': {'data_compromised': ['names',
'dates of birth',
'level of care',
'provider names',
'addresses',
'health plan identification numbers',
'genders',
'Social Security numbers']},
'investigation_status': 'Initiated',
'response': {'containment_measures': 'Immediate stop to the unauthorized '
'access'},
'threat_actor': 'Unauthorized Party',
'title': 'Ransomware Attack on Carolina Behavioral Health Alliance',
'type': 'Ransomware Attack'}