Some of the systems of DRH Health suspected suspicious activity that impacted its primary electronic medical records system.
The compromised information included names, Social Security numbers, dates of birth, phone numbers, addresses, limited treatment information and medical appointment information such as dates of service and names of the healthcare provider.
DRH immediately implemented incident response protocols, disconnected all systems, and investigated the incident with external cybersecurity experts
Source: https://www.duncanregional.com/notice-of-security-incident/
TPRM report: https://scoringcyber.rankiteo.com/company/duncanregionalhospital
"id": "drh11627422",
"linkid": "duncanregionalhospital",
"type": "Cyber Attack",
"date": "01/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'DRH Health',
'type': 'Healthcare'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'Social Security numbers',
'dates of birth',
'phone numbers',
'addresses',
'limited treatment information',
'medical appointment '
'information']},
'description': 'Some of the systems of DRH Health suspected suspicious '
'activity that impacted its primary electronic medical records '
'system. The compromised information included names, Social '
'Security numbers, dates of birth, phone numbers, addresses, '
'limited treatment information and medical appointment '
'information such as dates of service and names of the '
'healthcare provider.',
'impact': {'data_compromised': ['names',
'Social Security numbers',
'dates of birth',
'phone numbers',
'addresses',
'limited treatment information',
'medical appointment information'],
'systems_affected': ['primary electronic medical records system']},
'investigation_status': 'Investigated with external cybersecurity experts',
'response': {'containment_measures': ['disconnected all systems'],
'incident_response_plan_activated': 'Yes',
'third_party_assistance': 'Yes'},
'title': 'DRH Health Data Breach',
'type': 'Data Breach'}