Coos Health & Wellness

The Maine Office of the Attorney General disclosed a data breach affecting Coos Health & Wellness (CHW) on December 16, 2023, stemming from an unauthorized network access (hacking) incident that occurred on April 28, 2023. The breach compromised sensitive personal and medical data of at least one Maine resident, including Social Security numbers and medical information. Such exposed data heightens risks of identity theft, financial fraud, and misuse of protected health information (PHI). In response, CHW has provided 12 months of identity theft protection services via IDX to mitigate potential harm. The incident underscores vulnerabilities in healthcare cybersecurity, where even limited exposures can have severe repercussions for individuals due to the sensitivity of the leaked data. The breach’s scope though reported as affecting a single resident raises concerns about broader systemic weaknesses, potential underreporting, or targeted exploitation of high-value personal records.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/38754618-af45-4899-92c1-81b205bf813e.shtml

TPRM report: https://www.rankiteo.com/company/cooscountyfamilyhealthservices

"id": "coo029091825",
"linkid": "cooscountyfamilyhealthservices",
"type": "Breach",
"date": "4/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1',
                        'industry': 'Healthcare',
                        'location': 'Maine, USA',
                        'name': 'Coos Health & Wellness',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Unauthorized Access (Hacking)',
 'customer_advisories': 'Offered 12 months of identity theft protection '
                        'services through IDX',
 'data_breach': {'number_of_records_exposed': '1',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'medical information']},
 'date_detected': '2023-04-28',
 'date_publicly_disclosed': '2023-12-16',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Coos Health & Wellness on December 16, 2023. '
                'The breach occurred on April 28, 2023, resulting from '
                'unauthorized access (hacking) of their network. One resident '
                'of Maine was affected, with compromised information '
                'potentially including Social Security numbers and medical '
                'information. CHW has offered 12 months of identity theft '
                'protection services through IDX.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'medical information'],
            'identity_theft_risk': 'High (SSN and medical data exposed)'},
 'references': [{'date_accessed': '2023-12-16',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'recovery_measures': 'Offered 12 months of identity theft '
                                   'protection services through IDX'},
 'title': 'Coos Health & Wellness Data Breach (2023)',
 'type': 'Data Breach'}