Edgepark

Edgepark Medical Supplies, has had another HIPAA breach they notified HHS and 4,586 patients about the security incident.

Stating that recently learned about a security incident that may have impacted some personal information of a small percentage of their customers.

They immediately commenced an investigation and determined that some Edgepark.com accounts had been subject to a sophisticated cyberattack.

It is possible that someone accessed impacted customers’ Edgepark.com accounts without authorization and, if so, that person could have viewed information in the account, including customer name, date of birth, address, products purchased through the website, and health insurance information.

Source: https://www.databreaches.net/oh-edgepark-medical-supplies-notifying-6572-patients-after-a-password-spray-attack/

TPRM report: https://scoringcyber.rankiteo.com/company/edgepark

"id": "edg15727323",
"linkid": "edgepark",
"type": "Breach",
"date": "07/2019",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 4586,
                        'industry': 'Healthcare',
                        'name': 'Edgepark Medical Supplies',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 4586,
                 'personally_identifiable_information': ['customer name',
                                                         'date of birth',
                                                         'address',
                                                         'health insurance '
                                                         'information'],
                 'type_of_data_compromised': ['customer name',
                                              'date of birth',
                                              'address',
                                              'products purchased through the '
                                              'website',
                                              'health insurance information']},
 'description': 'Edgepark Medical Supplies experienced a data breach affecting '
                '4,586 patients. Unauthorized access to Edgepark.com accounts '
                'may have exposed personal information including names, dates '
                'of birth, addresses, products purchased, and health insurance '
                'information.',
 'impact': {'data_compromised': ['customer name',
                                 'date of birth',
                                 'address',
                                 'products purchased through the website',
                                 'health insurance information'],
            'systems_affected': ['Edgepark.com accounts']},
 'regulatory_compliance': {'regulations_violated': ['HIPAA'],
                           'regulatory_notifications': ['HHS']},
 'title': 'Edgepark Medical Supplies Data Breach',
 'type': 'Data Breach'}