Concord, Massachusetts-based Emerson Hospital notified 6,300 patients that their data was potentially breached on March 2018.
The data breach occurred during a weeklong period from May 9 to May 17, 2018.
A former employee of Emerson’s claims processing vendor, Miramed Revenue Group, sent a file containing patient health data to an unauthorized individual.
An investigation into the incident determined the file included data from about 6,300 patients, which included patient names, Social Security numbers, addresses, and insurance policy details.
Source: https://healthitsecurity.com/news/emerson-hospital-reports-third-party-vendor-breach-from-may-2018
TPRM report: https://scoringcyber.rankiteo.com/company/emerson-hospital
"id": "eme32712323",
"linkid": "emerson-hospital",
"type": "Breach",
"date": "05/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 6300,
'industry': 'Healthcare',
'location': 'Concord, Massachusetts',
'name': 'Emerson Hospital',
'type': 'Healthcare'}],
'attack_vector': 'Insider Threat',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 6300,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Patient names',
'Social Security numbers',
'Addresses',
'Insurance policy details']},
'date_detected': '2018-05-17',
'description': 'A former employee of Emerson’s claims processing vendor, '
'Miramed Revenue Group, sent a file containing patient health '
'data to an unauthorized individual.',
'impact': {'data_compromised': ['Patient names',
'Social Security numbers',
'Addresses',
'Insurance policy details']},
'threat_actor': 'Former Employee',
'title': 'Emerson Hospital Data Breach',
'type': 'Data Breach'}