Columbia Surgical Specialist of Spokane

Columbia Surgical Specialists of Spokane notified that they have been impacted by a data breach which affected 400,000 patients.

The incident was coded as a network/IT incident involving data on the network server.

The Organization worked with a security firm to unlock its systems and recover its data without paying a ransom within a few days of the attack.

Some of the impacted patient files were more than 20 years old, and the practice was still assessing how to notify various individuals as they have been moved or were deceased.

Source: https://www.databreaches.net/update-on-columbia-surgical-specialists-of-spokane-hipaa-incident-affecting-400000-patients/

TPRM report: https://scoringcyber.rankiteo.com/company/columbia-surgical-specialist-of-spokane

"id": "col32012323",
"linkid": "columbia-surgical-specialist-of-spokane",
"type": "Breach",
"date": "03/2019",
"severity": "50",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '400,000',
                        'industry': 'Healthcare',
                        'location': 'Spokane',
                        'name': 'Columbia Surgical Specialists of Spokane',
                        'type': 'Medical Practice'}],
 'attack_vector': 'Network/IT incident',
 'data_breach': {'number_of_records_exposed': '400,000',
                 'type_of_data_compromised': ['Patient files']},
 'description': 'Columbia Surgical Specialists of Spokane notified that they '
                'have been impacted by a data breach which affected 400,000 '
                'patients. The incident was coded as a network/IT incident '
                'involving data on the network server. The Organization worked '
                'with a security firm to unlock its systems and recover its '
                'data without paying a ransom within a few days of the attack. '
                'Some of the impacted patient files were more than 20 years '
                'old, and the practice was still assessing how to notify '
                'various individuals as they have been moved or were deceased.',
 'impact': {'data_compromised': ['Patient files'],
            'systems_affected': ['Network server']},
 'ransomware': {'ransom_paid': 'No'},
 'response': {'remediation_measures': ['Systems unlocked and data recovered'],
              'third_party_assistance': ['Security firm']},
 'title': 'Data Breach at Columbia Surgical Specialists of Spokane',
 'type': 'Data Breach'}