GetHealth

GetHealth”, a New York City based company that offers a unified solution to access health and wellness data from hundreds of wearables, medical devices and apps suffered a massive data breach incident.

Its non-password protected database that contained over 61 million records belonging to users around the world was compromised.

The records contained 16.71 GB of the user data including first and last name, display name, date of birth, weight, height, gender, geo-location, and more.

Source: https://www.websiteplanet.com/blog/gethealth-leak-report/

TPRM report: https://scoringcyber.rankiteo.com/company/gethealth

"id": "get225412123",
"linkid": "gethealth",
"type": "Breach",
"date": "09/2021",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Health and Wellness',
                        'location': 'New York City',
                        'name': 'GetHealth',
                        'type': 'Company'}],
 'attack_vector': 'Non-password protected database',
 'data_breach': {'number_of_records_exposed': 61000000,
                 'personally_identifiable_information': ['first and last name',
                                                         'display name',
                                                         'date of birth',
                                                         'weight',
                                                         'height',
                                                         'gender',
                                                         'geo-location'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Health Data']},
 'description': 'GetHealth, a New York City based company that offers a '
                'unified solution to access health and wellness data from '
                'hundreds of wearables, medical devices, and apps suffered a '
                'massive data breach incident. Its non-password protected '
                'database that contained over 61 million records belonging to '
                'users around the world was compromised. The records contained '
                '16.71 GB of the user data including first and last name, '
                'display name, date of birth, weight, height, gender, '
                'geo-location, and more.',
 'impact': {'data_compromised': ['first and last name',
                                 'display name',
                                 'date of birth',
                                 'weight',
                                 'height',
                                 'gender',
                                 'geo-location']},
 'title': 'GetHealth Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Non-password protected database'}