Confidant Health

Confidant Health, a provider of addiction recovery and other mental health services, experienced a data security incident. A misconfigured database left therapy sessions and sensitive patient records exposed online. Although there is no mention of data being stolen or misused, the vulnerability was a significant privacy breach that put personal health information at risk. The company corrected the issue swiftly upon being notified by a researcher, but the incident underscores the vulnerability of personal health data and the potential for substantial impact if such data were to be compromised or misused.

Source: https://www.wired.com/story/hackers-threaten-to-leak-planned-parenthood-data/

TPRM report: https://scoringcyber.rankiteo.com/company/confidanthealth

"id": "con000091024",
"linkid": "confidanthealth",
"type": "Vulnerability",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Confidant Health',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Misconfigured Database',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Therapy sessions',
                                              'Sensitive patient records']},
 'description': 'Confidant Health, a provider of addiction recovery and other '
                'mental health services, experienced a data security incident. '
                'A misconfigured database left therapy sessions and sensitive '
                'patient records exposed online. Although there is no mention '
                'of data being stolen or misused, the vulnerability was a '
                'significant privacy breach that put personal health '
                'information at risk. The company corrected the issue swiftly '
                'upon being notified by a researcher, but the incident '
                'underscores the vulnerability of personal health data and the '
                'potential for substantial impact if such data were to be '
                'compromised or misused.',
 'impact': {'data_compromised': ['Therapy sessions',
                                 'Sensitive patient records']},
 'lessons_learned': 'The incident underscores the vulnerability of personal '
                    'health data and the potential for substantial impact if '
                    'such data were to be compromised or misused.',
 'post_incident_analysis': {'corrective_actions': 'Corrected the '
                                                  'misconfiguration swiftly '
                                                  'upon notification',
                            'root_causes': 'Misconfigured Database'},
 'references': [{'source': 'Cyber Incident Description'}],
 'response': {'containment_measures': 'Corrected the misconfiguration swiftly '
                                      'upon notification'},
 'title': 'Confidant Health Data Security Incident',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Misconfiguration'}