Community Health Network in Indiana suffered a data breach incident after the protected health information of its customers were transmitted via trackers on their website from Google and Meta.
The compromised information included the User’s IP address, Dates, times, and/or locations of scheduled appointments, Information about the patient’s provider, type of appointment or procedure scheduled, Communications between the user and others through MyChart, First name and last name, Medical record number, Email address, Phone number, Contact information entered into Emergency Contacts or Advanced Care Planning, Information about whether the patient had insurance, Proxy name and contact information, Website button/menu selections.
The incident affected about 1.5 million patients and all the millions of patients were notified.
Source: https://www.databreaches.net/community-health-network-notifies-patients-of-meta-pixel-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/community-health-network
"id": "com230241122",
"linkid": "community-health-network",
"type": "Breach",
"date": "11/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 1500000,
'industry': 'Healthcare',
'location': 'Indiana',
'name': 'Community Health Network',
'type': 'Healthcare Provider'}],
'attack_vector': 'Trackers on Website',
'data_breach': {'number_of_records_exposed': 1500000,
'personally_identifiable_information': ['First name and last '
'name',
'Medical record '
'number',
'Email address',
'Phone number',
'Contact information '
'entered into '
'Emergency Contacts '
'or Advanced Care '
'Planning',
'Proxy name and '
'contact information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['User’s IP address',
'Dates, times, and/or locations '
'of scheduled appointments',
'Information about the patient’s '
'provider',
'Type of appointment or '
'procedure scheduled',
'Communications between the user '
'and others through MyChart',
'First name and last name',
'Medical record number',
'Email address',
'Phone number',
'Contact information entered '
'into Emergency Contacts or '
'Advanced Care Planning',
'Information about whether the '
'patient had insurance',
'Proxy name and contact '
'information',
'Website button/menu '
'selections']},
'description': 'Community Health Network in Indiana suffered a data breach '
'incident after the protected health information of its '
'customers were transmitted via trackers on their website from '
'Google and Meta.',
'impact': {'data_compromised': ['User’s IP address',
'Dates, times, and/or locations of scheduled '
'appointments',
'Information about the patient’s provider',
'Type of appointment or procedure scheduled',
'Communications between the user and others '
'through MyChart',
'First name and last name',
'Medical record number',
'Email address',
'Phone number',
'Contact information entered into Emergency '
'Contacts or Advanced Care Planning',
'Information about whether the patient had '
'insurance',
'Proxy name and contact information',
'Website button/menu selections']},
'title': 'Community Health Network Data Breach',
'type': 'Data Breach'}