CentraCare Health suffered from a ransomware incident that have involved the personal information or protected health information of certain CentraCarepatients or other individuals.
Although the organization has no reason to believe that any personal information or protected health information has been misused for the purpose of committing fraud or identity theft.
CentraCare determined that the files contained personal or protected health information for certain individuals.
The compromised information included, depending on the affected individual, the individual’s name, address, date of birth, Social Security number, Medicare ID number, and/or medical treatment information.
CentraCare sent written notifications to individuals whose personal information or protected health information was contained in the potentially acquired documents for whom it has contact information and arranged for complimentary identity theft protection services for those individuals whose Social Security numbers and/or driver’s license numbers were involved in the incident.
Source: https://www.centracare.com/documents/CentraCare-Netgain-notice.pdf
TPRM report: https://scoringcyber.rankiteo.com/company/centracare-occupational-health
"id": "cen526223",
"linkid": "centracare-occupational-health",
"type": "Ransomware",
"date": "07/2021",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'CentraCare Health',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Written notifications to affected individuals and '
'complimentary identity theft protection services',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Protected Health Information']},
'description': 'CentraCare Health suffered from a ransomware incident that '
'may have involved the personal information or protected '
'health information of certain CentraCare patients or other '
'individuals.',
'impact': {'data_compromised': ['Name',
'Address',
'Date of Birth',
'Social Security Number',
'Medicare ID Number',
'Medical Treatment Information'],
'identity_theft_risk': True},
'response': {'communication_strategy': 'Written notifications to affected '
'individuals and complimentary '
'identity theft protection services',
'incident_response_plan_activated': True},
'title': 'CentraCare Health Ransomware Incident',
'type': 'Ransomware'}