Golden Valley Health Centers

Golden Valley Health Centers has become aware of a data security incident that has resulted in the inadvertent exposure of patients’ health information after an unknown, unauthorized third party accessed it.

The investigation found that one of the affected email accounts contained medical information, perhaps including patients' billing and insurance information, patient referral information, and appointment data.

Golden Valley Health Centres has taken measures to prevent a similar incident from happening again, including, but not limited to, employee education and training, reviewing and revising information security, as well as privacy policies and procedures.

The organization is still committed to protecting the privacy of patients' information.

Additional details regarding what happened and a toll-free number where patients may get more information about the incident are included in letters that are addressed to patients who might be affected.

Source: https://www.databreaches.net/golden-valley-health-centers-notifies-patients-after-employee-email-account-comprised/

TPRM report: https://scoringcyber.rankiteo.com/company/golden-valley-health-centers

"id": "gol25224423",
"linkid": "golden-valley-health-centers",
"type": "Data Leak",
"date": "03/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Golden Valley Health Centers',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Email Account Compromise',
 'customer_advisories': 'letters addressed to patients who might be affected',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['medical information',
                                              'billing and insurance '
                                              'information',
                                              'patient referral information',
                                              'appointment data']},
 'description': 'Golden Valley Health Centers has become aware of a data '
                'security incident that has resulted in the inadvertent '
                'exposure of patients’ health information after an unknown, '
                'unauthorized third party accessed it.',
 'impact': {'data_compromised': ['medical information',
                                 'billing and insurance information',
                                 'patient referral information',
                                 'appointment data']},
 'post_incident_analysis': {'corrective_actions': ['employee education and '
                                                   'training',
                                                   'reviewing and revising '
                                                   'information security',
                                                   'privacy policies and '
                                                   'procedures']},
 'response': {'communication_strategy': 'letters addressed to patients who '
                                        'might be affected',
              'remediation_measures': ['employee education and training',
                                       'reviewing and revising information '
                                       'security',
                                       'privacy policies and procedures']},
 'threat_actor': 'Unknown, unauthorized third party',
 'title': 'Data Security Incident at Golden Valley Health Centers',
 'type': 'Data Breach'}