Conifer Revenue Cycle Solutions, LLC experienced a cybersecurity incident that may have affected your personal information.
It is currently providing this notice on behalf of the healthcare providers.
An unauthorized third party gained access to a Microsoft Office 365-hosted business email account.
This email account is separate from Conifer’s internal network and systems, which were not affected by this incident.
Personal information involved in this incident may have included one or more of the following elements full name, date of birth, and address, social security number, driver’s license/state ID number, and/or financial account information , medical and treatment information ,health insurance information and billing and claims information.
Source: https://response.idx.us/crcs-information-texas/
TPRM report: https://scoringcyber.rankiteo.com/company/conifer-health-solutions
"id": "con1940201022",
"linkid": "conifer-health-solutions",
"type": "Cyber Attack",
"date": "08/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'Conifer Revenue Cycle Solutions, LLC',
'type': 'Company'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'personally_identifiable_information': ['full name',
'date of birth',
'address',
'social security '
'number',
'driver’s '
'license/state ID '
'number'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['full name',
'date of birth',
'address',
'social security number',
'driver’s license/state ID '
'number',
'financial account information',
'medical and treatment '
'information',
'health insurance information',
'billing and claims '
'information']},
'description': 'Conifer Revenue Cycle Solutions, LLC experienced a '
'cybersecurity incident that may have affected your personal '
'information. It is currently providing this notice on behalf '
'of the healthcare providers. An unauthorized third party '
'gained access to a Microsoft Office 365-hosted business email '
'account. This email account is separate from Conifer’s '
'internal network and systems, which were not affected by this '
'incident. Personal information involved in this incident may '
'have included one or more of the following elements: full '
'name, date of birth, and address, social security number, '
'driver’s license/state ID number, and/or financial account '
'information, medical and treatment information, health '
'insurance information and billing and claims information.',
'impact': {'data_compromised': ['full name',
'date of birth',
'address',
'social security number',
'driver’s license/state ID number',
'financial account information',
'medical and treatment information',
'health insurance information',
'billing and claims information'],
'systems_affected': 'Microsoft Office 365-hosted business email '
'account'},
'initial_access_broker': {'entry_point': 'Microsoft Office 365-hosted '
'business email account'},
'motivation': 'Data Theft',
'threat_actor': 'Unauthorized third party',
'title': 'Conifer Revenue Cycle Solutions Cyber Incident',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized access to Microsoft Office '
'365-hosted business email account'}