Cone Health

The Alamance Skin Center, a Cone Health practice was targeted in a ransomware attack.

The phishing attack was aimed to steal credentials and protected health information and data including patient names, addresses, health record numbers, birth dates, diagnosis details, and date(s) of service was breached in the incident.

The company immediately took quick action to separate the impacted systems and asked help from forensics experts to deal with the attack.

Source: https://www.hipaa.info/breaches-at-alamance-skin-center-perry-county-memorial-hospital-and-brylin-behavioral-health/

TPRM report: https://scoringcyber.rankiteo.com/company/cone-health

"id": "con22578222",
"linkid": "cone-health",
"type": "Ransomware",
"date": "07/2020",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Alamance Skin Center',
                        'type': 'Healthcare Practice'}],
 'attack_vector': 'Phishing',
 'data_breach': {'personally_identifiable_information': ['patient names',
                                                         'addresses',
                                                         'health record '
                                                         'numbers',
                                                         'birth dates'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['patient names',
                                              'addresses',
                                              'health record numbers',
                                              'birth dates',
                                              'diagnosis details',
                                              'date(s) of service']},
 'description': 'The Alamance Skin Center, a Cone Health practice, was '
                'targeted in a ransomware attack. The phishing attack aimed to '
                'steal credentials and protected health information. Data '
                'including patient names, addresses, health record numbers, '
                'birth dates, diagnosis details, and date(s) of service was '
                'breached in the incident. The company immediately took quick '
                'action to separate the impacted systems and asked help from '
                'forensics experts to deal with the attack.',
 'impact': {'data_compromised': ['patient names',
                                 'addresses',
                                 'health record numbers',
                                 'birth dates',
                                 'diagnosis details',
                                 'date(s) of service']},
 'motivation': 'Data Theft',
 'response': {'containment_measures': 'System Isolation',
              'third_party_assistance': 'Forensics Experts'},
 'title': 'Ransomware Attack on Alamance Skin Center',
 'type': 'Ransomware'}