clearbalance

A California-based company called ClearBalance reported being the victim of a cyber assault and that over 200000 of their customers' personally identifiable information (PII) had been stolen during an email hacking incident.

ClearBalance said the personal information impacted included: names, tax IDs, Social Security numbers, dates of birth, government-issued IDs, phone numbers, healthcare account numbers, balances, dates of service, ClearBalance loan numbers, personal banking information, clinical information, health insurance information, and full-face photographs.

The business was updating its protocols for reporting suspicious activities, changing user account passwords, and "implementing stricter access controls in the cloud email environment.

Source: https://healthitsecurity.com/news/clearbalancedata-incidentimpactsover-200000uspatientspii

TPRM report: https://scoringcyber.rankiteo.com/company/clearbalance

"id": "cle17293223",
"linkid": "clearbalance",
"type": "Data Leak",
"date": "07/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 200000,
                        'industry': 'Healthcare',
                        'location': 'California',
                        'name': 'ClearBalance',
                        'type': 'Company'}],
 'attack_vector': 'Email Hacking',
 'data_breach': {'number_of_records_exposed': 200000,
                 'personally_identifiable_information': ['names',
                                                         'tax IDs',
                                                         'Social Security '
                                                         'numbers',
                                                         'dates of birth',
                                                         'government-issued '
                                                         'IDs',
                                                         'phone numbers',
                                                         'healthcare account '
                                                         'numbers',
                                                         'balances',
                                                         'dates of service',
                                                         'ClearBalance loan '
                                                         'numbers',
                                                         'personal banking '
                                                         'information',
                                                         'clinical information',
                                                         'health insurance '
                                                         'information',
                                                         'full-face '
                                                         'photographs'],
                 'sensitivity_of_data': ['high'],
                 'type_of_data_compromised': ['PII']},
 'description': 'ClearBalance reported being the victim of a cyber assault '
                "where over 200,000 customers' personally identifiable "
                'information (PII) was stolen during an email hacking '
                'incident.',
 'impact': {'data_compromised': ['names',
                                 'tax IDs',
                                 'Social Security numbers',
                                 'dates of birth',
                                 'government-issued IDs',
                                 'phone numbers',
                                 'healthcare account numbers',
                                 'balances',
                                 'dates of service',
                                 'ClearBalance loan numbers',
                                 'personal banking information',
                                 'clinical information',
                                 'health insurance information',
                                 'full-face photographs']},
 'response': {'containment_measures': ['updating protocols for reporting '
                                       'suspicious activities',
                                       'changing user account passwords',
                                       'implementing stricter access controls '
                                       'in the cloud email environment']},
 'title': 'ClearBalance Email Hacking Incident',
 'type': 'Data Breach'}