HealthCare, Inc.

HealthCare, Inc. suffered a cyberattack-induced data breach between September 19–22, 2021, exposing sensitive personal information of 625 individuals. The unauthorized access compromised names and full dates of birth, though the breach was only discovered and reported to the company on November 3, 2021. While the stolen data did not include financial records, medical histories, or highly sensitive identifiers (e.g., Social Security numbers), the exposure of full dates of birth when combined with names poses risks for identity theft, targeted phishing, or fraudulent account creation.The delayed detection (over a month) suggests potential gaps in monitoring or incident response protocols. Although the breach did not involve ransomware or large-scale financial harm, the compromise of personally identifiable information (PII) of patients underscores vulnerabilities in healthcare data security. The incident was formally disclosed to the Washington State Office of the Attorney General, indicating regulatory scrutiny and potential reputational damage. No evidence suggests the data was misused, but the exposure alone warrants heightened safeguards for affected individuals.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=11272

TPRM report: https://www.rankiteo.com/company/community-health-care-inc-

"id": "com551091725",
"linkid": "community-health-care-inc-",
"type": "Cyber Attack",
"date": "9/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 625,
                        'industry': 'Healthcare',
                        'location': 'Washington State, USA',
                        'name': 'HealthCare, Inc.',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'data_exfiltration': 'Yes (unauthorized access)',
                 'number_of_records_exposed': 625,
                 'personally_identifiable_information': ['Names',
                                                         'Full Dates of Birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2021-11-03',
 'description': 'The Washington State Office of the Attorney General reported '
                'that HealthCare, Inc. experienced a data breach due to a '
                'cyberattack affecting 625 individuals. The breach occurred '
                'from September 19 to September 22, 2021, and involved '
                'unauthorized access to names and full dates of birth.',
 'impact': {'data_compromised': ['Names', 'Full Dates of Birth'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Washington State '
                                                        'Office of the '
                                                        'Attorney General']},
 'title': 'HealthCare, Inc. Data Breach (2021)',
 'type': 'Data Breach'}