A computer memory stick of East Sussex NHS containing the personal information of 3,000 patients was found in public.
The stick was not password protected and the information might have been accessed by anyone.
Source: https://www.bbc.com/news/uk-england-sussex-33401806
TPRM report: https://scoringcyber.rankiteo.com/company/eshtnhs
"id": "eas193325422",
"linkid": "eshtnhs",
"type": "Breach",
"date": "07/2015",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 3000,
'industry': 'Healthcare',
'location': 'East Sussex, UK',
'name': 'East Sussex NHS',
'type': 'Healthcare'}],
'attack_vector': 'Physical Loss',
'data_breach': {'data_encryption': 'No',
'number_of_records_exposed': 3000,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information']},
'description': 'A computer memory stick of East Sussex NHS containing the '
'personal information of 3,000 patients was found in public. '
'The stick was not password protected and the information '
'might have been accessed by anyone.',
'impact': {'data_compromised': ['Personal Information']},
'title': 'Unsecured Memory Stick Found in Public',
'type': 'Data Breach',
'vulnerability_exploited': 'Unencrypted Data Storage'}