Centerstone

Centerstone, a nonprofit health organization provides mental health, addiction recovery, residential care, therapeutic foster care, counseling, and crisis services across the country.

It faced a data security incident that have involved personal and protected health information belonging to certain current and former Centerstone clients.

Centerstone has sent notification of this incident to potentially impacted individuals and is providing resources to assist them.

Centerstone detected unusual activity involving its email environment and took immediate steps to secure its email environment by launching a thorough investigation to determine the scope of the issue.

Investigation determined that an unknown actor gained access to and obtained a limited amount of data from three employee email accounts between November 4, 2021 and February 14, 2022.

Centerstone undertook a comprehensive review of the full contents of the email accounts to identify whether any individual information was contained therein.

The email accounts contained certain personal and protected health information.

Currently there is no evidence of the misuse of any information potentially involved in this incident.

Source: https://www.prnewswire.com/news-releases/centerstone-provides-notice-of-data-security-incident-301601090.html

TPRM report: https://scoringcyber.rankiteo.com/company/centerstone

"id": "cen138171022",
"linkid": "centerstone",
"type": "Cyber Attack",
"date": "08/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Centerstone',
                        'type': 'Nonprofit Health Organization'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'type_of_data_compromised': 'Personal and Protected Health '
                                             'Information'},
 'description': 'Centerstone, a nonprofit health organization, experienced a '
                'data security incident involving personal and protected '
                'health information of current and former clients. Unusual '
                'activity was detected in its email environment, and an '
                'investigation revealed that an unknown actor accessed and '
                'obtained data from three employee email accounts between '
                'November 4, 2021, and February 14, 2022.',
 'impact': {'data_compromised': 'Personal and Protected Health Information',
            'systems_affected': 'Email Environment'},
 'initial_access_broker': {'entry_point': 'Email Environment'},
 'investigation_status': 'Completed',
 'post_incident_analysis': {'root_causes': 'Email Compromise'},
 'response': {'communication_strategy': 'Notification to potentially impacted '
                                        'individuals, providing resources to '
                                        'assist them',
              'containment_measures': 'Secured email environment, launched '
                                      'thorough investigation'},
 'threat_actor': 'Unknown',
 'title': 'Centerstone Data Security Incident',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Security'}