The employee email accounts of Covenant HealthCare were accessed by an unauthorized party in December 2020.
The compromised email accounts contained personal information, specifically names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical diagnosis, and clinical information, medical treatment information, prescription information, doctors’ names, medical record numbers, patient account numbers, and medical insurance information.
Covenant HealthCare immediately launched the investigation, took preventive steps and provided direct notice to impacted individuals.
Source: https://www.covenanthealthcare.com/ch/notice-of-data-security-incident
TPRM report: https://scoringcyber.rankiteo.com/company/covenant-healthcare
"id": "cov19186722",
"linkid": "covenant-healthcare",
"type": "Breach",
"date": "12/2020",
"severity": "70",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'Covenant HealthCare',
'type': 'Healthcare Provider'}],
'attack_vector': 'Unauthorized Email Access',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Dates of Birth',
'Social Security Numbers',
'Driver’s License Numbers',
'Medical Diagnosis and Clinical '
'Information',
'Medical Treatment Information',
'Prescription Information',
'Doctors’ Names',
'Medical Record Numbers',
'Patient Account Numbers',
'Medical Insurance Information']},
'date_detected': 'December 2020',
'description': 'The employee email accounts of Covenant HealthCare were '
'accessed by an unauthorized party in December 2020. The '
'compromised email accounts contained personal information, '
'specifically names, addresses, dates of birth, Social '
'Security numbers, driver’s license numbers, medical diagnosis '
'and clinical information, medical treatment information, '
'prescription information, doctors’ names, medical record '
'numbers, patient account numbers, and medical insurance '
'information. Covenant HealthCare immediately launched the '
'investigation, took preventive steps and provided direct '
'notice to impacted individuals.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Dates of Birth',
'Social Security Numbers',
'Driver’s License Numbers',
'Medical Diagnosis and Clinical Information',
'Medical Treatment Information',
'Prescription Information',
'Doctors’ Names',
'Medical Record Numbers',
'Patient Account Numbers',
'Medical Insurance Information'],
'systems_affected': 'Email Accounts'},
'response': {'communication_strategy': 'Direct Notice to Impacted Individuals',
'containment_measures': 'Preventive Steps Taken',
'incident_response_plan_activated': True},
'title': 'Covenant HealthCare Email Account Breach',
'type': 'Data Breach'}