The California Office of the Attorney General reported that City of Hope experienced a phishing email incident that compromised the email accounts of four staff members on May 31 and June 2, 2017. The breach potentially exposed protected health information (PHI) of individuals, including names and medical record information. The report was made on August 3, 2017.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-100824
TPRM report: https://www.rankiteo.com/company/city-of-hope
"id": "cit223072925",
"linkid": "city-of-hope",
"type": "Breach",
"date": "5/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Healthcare',
'location': 'California',
'name': 'City of Hope',
'type': 'Healthcare'}],
'attack_vector': 'Email',
'data_breach': {'personally_identifiable_information': 'Names, Medical Record '
'Information',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Protected Health Information '
'(PHI)'},
'date_detected': ['2017-05-31', '2017-06-02'],
'date_publicly_disclosed': '2017-08-03',
'description': 'The California Office of the Attorney General reported that '
'City of Hope experienced a phishing email incident that '
'compromised the email accounts of four staff members on May '
'31 and June 2, 2017. The breach potentially exposed protected '
'health information (PHI) of individuals, including names and '
'medical record information.',
'impact': {'data_compromised': 'Protected Health Information (PHI)',
'systems_affected': 'Email accounts'},
'initial_access_broker': {'entry_point': 'Email'},
'references': [{'date_accessed': '2017-08-03',
'source': 'California Office of the Attorney General'}],
'title': 'City of Hope Phishing Email Incident',
'type': 'Phishing',
'vulnerability_exploited': 'Human'}