City of Philadelphia – Department of Public Health

The Philadelphia Department of Public Health (PDPH) has discovered sensitive information of patients with hepatitis B and hepatitis C has been exposed over the internet and could be accessed by anyone without the need for authentication.

The issue was corrected within minutes of the hospital being notified of the breach. An investigation has now been launched to determine the nature, cause, and extent of the breach.

The exposed data included a patient’s name, along with their gender, address, test results, and in some cases, Social Security number.

According to The Philadelphia Inquirer, the breach could have affected tens of thousands of patients. The newspaper found data on around 23,000 patients who had contracted hepatitis C.

Source: https://www.hipaajournal.com/philadelphia-department-of-public-health-data-breach-exposed-hepatitis-patients-data/

"id": "CIT32317423",
"linkid": "city-of-philadelphia-department-of-public-health",
"type": "Data Leak",
"date": "10/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"