On February 12, 2024, Consulting Radiologists LTD experienced a data breach after detecting suspicious network activity, resulting in unauthorized access to highly sensitive personal and medical data. The compromised information included names, addresses, dates of birth, Social Security numbers, health insurance details, and medical records. While the total number of affected individuals remains undisclosed, at least five individuals in Rhode Island were confirmed as victims. The breach was formally reported by the Vermont Office of the Attorney General on July 16, 2024. The exposure of such critical data particularly Social Security numbers and medical information poses severe risks, including identity theft, financial fraud, and long-term reputational harm to the organization. The incident underscores vulnerabilities in the company’s cybersecurity defenses, raising concerns about compliance with data protection regulations and the potential for broader exploitation of the stolen information.
Source: https://ago.vermont.gov/document/2024-07-16-consulting-radiologists-ltd-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/consulting-radiologists-ltd
"id": "con039090625",
"linkid": "consulting-radiologists-ltd",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'At least 5 (in Rhode Island); '
'total unknown',
'industry': 'Healthcare',
'location': 'Vermont, USA (with affected individuals '
'in Rhode Island)',
'name': 'Consulting Radiologists LTD',
'type': 'Healthcare Provider'}],
'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
'number_of_records_exposed': 'Unknown (at least 5 in Rhode '
'Island)',
'personally_identifiable_information': ['names',
'addresses',
'dates of birth',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2024-02-12',
'date_publicly_disclosed': '2024-07-16',
'description': 'The Vermont Office of the Attorney General reported a data '
'breach involving Consulting Radiologists LTD. The breach '
'occurred on February 12, 2024, when suspicious activity in '
'the network was detected, leading to unauthorized access to '
'sensitive data including names, addresses, dates of birth, '
'Social Security numbers, health insurance information, and '
'medical information. The total number of affected individuals '
'is unknown, but 5 individuals in Rhode Island were '
'specifically mentioned as affected.',
'impact': {'data_compromised': ['names',
'addresses',
'dates of birth',
'Social Security numbers',
'health insurance information',
'medical information'],
'identity_theft_risk': 'High (PII and medical data exposed)'},
'references': [{'date_accessed': '2024-07-16',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA (likely, due to PHI '
'exposure)',
'State data breach '
'notification laws (e.g., '
'Vermont, Rhode Island)'],
'regulatory_notifications': 'Vermont Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Public disclosure via Vermont Office '
'of the Attorney General'},
'title': 'Data Breach at Consulting Radiologists LTD',
'type': 'Data Breach'}