Deaconess Health System

The medical records of female patients of Deaconess Health System were accessed without authorization by a physician formerly employed here.

The records contained personal information, contact information, and other information of six women.

Deaconess Health System apologized for the breach and offered the woman complimentary online identity theft protection for 12 months.

Source: https://www.hipaajournal.com/deaconess-health-system-and-blue-earth-county-notify-patients-about-insider-data-breaches/

TPRM report: https://scoringcyber.rankiteo.com/company/deaconess-health-system

"id": "dea101622",
"linkid": "deaconess-health-system",
"type": "Breach",
"date": "04/2022",
"severity": "75",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 6,
                        'industry': 'Healthcare',
                        'name': 'Deaconess Health System',
                        'type': 'Healthcare'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'Offered complimentary online identity theft '
                        'protection for 12 months',
 'data_breach': {'number_of_records_exposed': 6,
                 'type_of_data_compromised': ['Personal Information',
                                              'Contact Information']},
 'description': 'The medical records of female patients of Deaconess Health '
                'System were accessed without authorization by a physician '
                'formerly employed here. The records contained personal '
                'information, contact information, and other information of '
                'six women.',
 'impact': {'data_compromised': ['Personal Information',
                                 'Contact Information']},
 'references': [{'source': 'Deaconess Health System'}],
 'response': {'communication_strategy': 'Apologized for the breach and offered '
                                        'complimentary online identity theft '
                                        'protection for 12 months'},
 'threat_actor': 'Former Employee',
 'title': 'Unauthorized Access of Female Patient Medical Records at Deaconess '
          'Health System',
 'type': 'Data Breach'}