CarePartners

CarePartners became victim of a cyber attack where Hackers release their employees’ wage statements and other financial files, also some of the data was being dumped publicly.

It was presumably as a way to increase pressure on CarePartners to pay the “requested” fee for the hackers not to release any more data.

The compromised data includes the employee’s name, address, social insurance number, and wage and deductions information.

The hackers claim that they have three other dumps with employee and corporate files that they will release at some point. Perhaps those files contain more current financial and employee data.

Source: https://www.databreaches.net/update-hackers-release-carepartners-employees-wage-statements-and-other-financial-files/

TPRM report: https://scoringcyber.rankiteo.com/company/carepartners

"id": "car95122223",
"linkid": "carepartners",
"type": "Data Leak",
"date": "02/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'CarePartners',
                        'type': 'Organization'}],
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': ["Employee's name",
                                                         'Address',
                                                         'Social insurance '
                                                         'number'],
                 'type_of_data_compromised': ["Employee's name",
                                              'Address',
                                              'Social insurance number',
                                              'Wage and deductions '
                                              'information']},
 'description': 'CarePartners became victim of a cyber attack where hackers '
                'released employees’ wage statements and other financial '
                'files, also some of the data was being dumped publicly. It '
                'was presumably as a way to increase pressure on CarePartners '
                "to pay the 'requested' fee for the hackers not to release any "
                "more data. The compromised data includes the employees' name, "
                'address, social insurance number, and wage and deductions '
                'information. The hackers claim that they have three other '
                'dumps with employee and corporate files that they will '
                'release at some point. Perhaps those files contain more '
                'current financial and employee data.',
 'impact': {'data_compromised': ["Employee's name",
                                 'Address',
                                 'Social insurance number',
                                 'Wage and deductions information']},
 'motivation': 'Financial Gain',
 'ransomware': {'data_exfiltration': True, 'ransom_demanded': True},
 'title': 'CarePartners Cyber Attack',
 'type': 'Data Breach, Ransomware'}