Guardant Health, Inc.

On May 3, 2024, the California Office of the Attorney General reported a data breach involving Guardant Health, Inc. The breach occurred due to an employee inadvertently sharing a file on a public platform on October 5, 2020, and was accessed by unidentified third parties between September 8, 2023 and February 28, 2024. The file may have included names, ages, medical record numbers, and treatment information for an unknown number of individuals, but did not contain financial information or Social Security numbers.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-584811

TPRM report: https://www.rankiteo.com/company/guardanthealth

"id": "gua040072625",
"linkid": "guardanthealth",
"type": "Breach",
"date": "10/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Healthcare',
                        'name': 'Guardant Health, Inc.',
                        'type': 'Healthcare'}],
 'attack_vector': 'Accidental Data Exposure',
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['Names',
                                                         'Ages',
                                                         'Medical Record '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Ages',
                                              'Medical Record Numbers',
                                              'Treatment Information']},
 'date_detected': '2024-05-03',
 'date_publicly_disclosed': '2024-05-03',
 'description': 'An employee inadvertently shared a file on a public platform '
                'on October 5, 2020, which was accessed by unidentified third '
                'parties between September 8, 2023, and February 28, 2024. The '
                'file may have included names, ages, medical record numbers, '
                'and treatment information for an unknown number of '
                'individuals, but did not contain financial information or '
                'Social Security numbers.',
 'impact': {'data_compromised': ['Names',
                                 'Ages',
                                 'Medical Record Numbers',
                                 'Treatment Information']},
 'initial_access_broker': {'entry_point': 'Public Platform'},
 'post_incident_analysis': {'root_causes': 'Human Error'},
 'references': [{'date_accessed': '2024-05-03',
                 'source': 'California Office of the Attorney General'}],
 'threat_actor': 'Unidentified Third Parties',
 'title': 'Data Breach at Guardant Health, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}