The California Office of the Attorney General reported a data breach at Hair Free Forever on June 3, 2018. A former employee, Nathalie Collins, allegedly stole patient personal and confidential information, including names, addresses, phone numbers, email addresses, birth dates, and medical information. The number of affected individuals is unknown.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-136762
TPRM report: https://www.rankiteo.com/company/hair-free-forever
"id": "hai237080425",
"linkid": "hair-free-forever",
"type": "Breach",
"date": "6/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'Hair Free Forever',
'type': 'Business'}],
'attack_vector': 'Insider Threat',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Medical Information']},
'date_detected': '2018-06-03',
'date_publicly_disclosed': '2018-06-03',
'description': 'A former employee, Nathalie Collins, allegedly stole patient '
'personal and confidential information, including names, '
'addresses, phone numbers, email addresses, birth dates, and '
'medical information.',
'impact': {'data_compromised': ['names',
'addresses',
'phone numbers',
'email addresses',
'birth dates',
'medical information']},
'motivation': 'Unknown',
'references': [{'date_accessed': '2018-06-03',
'source': 'California Office of the Attorney General'}],
'threat_actor': 'Nathalie Collins',
'title': 'Data Breach at Hair Free Forever',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Access by Former Employee'}