Grand River Medical Group, P.C.

The Maine Office of the Attorney General reported a data breach at Grand River Medical Group, P.C. on February 12, 2021. The breach occurred between October 19 and October 22, 2020, when an unauthorized individual accessed an employee's email account, potentially affecting 37,858 individuals. Identity theft protection services were offered through IDX, which includes credit monitoring and a $1,000,000 insurance policy.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/deb9cb32-65aa-44e1-94c0-951e3b0d461c.shtml

TPRM report: https://www.rankiteo.com/company/grand-river-medical-group

"id": "gra830072825",
"linkid": "grand-river-medical-group",
"type": "Breach",
"date": "10/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 37858,
                        'industry': 'Healthcare',
                        'name': 'Grand River Medical Group, P.C.',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': 37858,
                 'type_of_data_compromised': 'Email Account Data'},
 'date_detected': '2021-02-12',
 'date_publicly_disclosed': '2021-02-12',
 'description': "An unauthorized individual accessed an employee's email "
                'account, potentially affecting 37,858 individuals.',
 'impact': {'data_compromised': 'Email Account Data',
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2021-02-12',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': 'Identity theft protection services '
                                      'offered',
              'third_party_assistance': 'IDX'},
 'threat_actor': 'Unauthorized Individual',
 'title': 'Data Breach at Grand River Medical Group, P.C.',
 'type': 'Data Breach'}