CHU Sainte-Justine

An employee of Ste-Justine Hospital was fired after she consulted without justification, the medical files of 344 patients & some of them were employees.

The hospital filed a complaint with police against the ex-employee, who worked in one of its clinics.

Hospital’s computer security system had not been compromised.

Source: https://montrealgazette.com/news/local-news/ste-justine-hospital-employee-fired-after-patient-files-consulted-without-authorization

TPRM report: https://scoringcyber.rankiteo.com/company/chu-sainte-justine

"id": "chu2317201222",
"linkid": "chu-sainte-justine",
"type": "Data Leak",
"date": "02/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 344,
                        'industry': 'Healthcare',
                        'name': 'Ste-Justine Hospital',
                        'type': 'Hospital'}],
 'attack_vector': 'Internal',
 'data_breach': {'number_of_records_exposed': 344,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Medical Records'},
 'description': 'An employee of Ste-Justine Hospital was fired after she '
                'consulted without justification, the medical files of 344 '
                'patients & some of them were employees. The hospital filed a '
                'complaint with police against the ex-employee, who worked in '
                'one of its clinics. Hospital’s computer security system had '
                'not been compromised.',
 'impact': {'data_compromised': 'Medical Records'},
 'motivation': 'Unknown',
 'response': {'law_enforcement_notified': True},
 'threat_actor': 'Ex-employee',
 'title': 'Unauthorized Access to Medical Records at Ste-Justine Hospital',
 'type': 'Unauthorized Access',
 'vulnerability_exploited': 'Insider Threat'}