Forefront Dermatology

Forefront Dermatology reached a $3.75 settlement to resolve a class action lawsuit stemming from a May 2021 healthcare data breach.

The breach impacted more than 2.4 million individuals.

An unauthorized party accessed Forefront Dermatology’s IT network.

Files compromised contained names, birth dates, patient account numbers, addresses, dates of service, provider names, medical treatment information, and medical record numbers.

Impacted patients and employees were harmed in the form of the loss of the benefit of their bargain, out-of-pocket expenses, loss of privacy, and loss of the value of their time reasonably incurred to remedy or to mitigate the effects of the attack.

Source: https://healthitsecurity.com/news/forefront-dermatology-to-pay-3.75m-in-healthcare-data-breach-settlement

TPRM report: https://scoringcyber.rankiteo.com/company/forefront-dermatology

"id": "for153491222",
"linkid": "forefront-dermatology",
"type": "Data Leak",
"date": "05/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '2.4 million individuals',
                        'industry': 'Healthcare',
                        'name': 'Forefront Dermatology',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': '2.4 million',
                 'personally_identifiable_information': ['names',
                                                         'birth dates',
                                                         'addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Protected Health Information']},
 'date_detected': 'May 2021',
 'description': 'Forefront Dermatology reached a $3.75 settlement to resolve a '
                'class action lawsuit stemming from a May 2021 healthcare data '
                'breach. The breach impacted more than 2.4 million '
                'individuals. An unauthorized party accessed Forefront '
                'Dermatology’s IT network. Files compromised contained names, '
                'birth dates, patient account numbers, addresses, dates of '
                'service, provider names, medical treatment information, and '
                'medical record numbers. Impacted patients and employees were '
                'harmed in the form of the loss of the benefit of their '
                'bargain, out-of-pocket expenses, loss of privacy, and loss of '
                'the value of their time reasonably incurred to remedy or to '
                'mitigate the effects of the attack.',
 'impact': {'data_compromised': ['names',
                                 'birth dates',
                                 'patient account numbers',
                                 'addresses',
                                 'dates of service',
                                 'provider names',
                                 'medical treatment information',
                                 'medical record numbers'],
            'financial_loss': '$3.75 million in settlement',
            'legal_liabilities': 'Class action lawsuit'},
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
 'threat_actor': 'Unauthorized Party',
 'title': 'Forefront Dermatology Data Breach',
 'type': 'Data Breach'}