HealthEC, LLC

HealthEC (HEC), a healthcare technology company, revealed a data breach that affected 4.5 million clients of its partners.

HEC found out that an unidentified actor had copied some files and accessed several of its systems.

Information belonging to a few of HEC's clients was found in the files. The healthcare company started informing affected clients and collaborated with them to inform other people who might be affected.

Health EC advises those who may be affected to maintain their vigilance against potential fraud and identity theft.

Source: https://securityaffairs.com/156911/data-breach/healthec-disclosed-data-breach.html

TPRM report: https://scoringcyber.rankiteo.com/company/healthec

"id": "hea12345124",
"linkid": "healthec",
"type": "Data Leak",
"date": "01/2024",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '4.5 million',
                        'industry': 'Healthcare',
                        'name': 'HealthEC',
                        'type': 'Healthcare Technology Company'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'Maintain vigilance against potential fraud and '
                        'identity theft',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '4.5 million',
                 'type_of_data_compromised': 'Client Information'},
 'description': 'HealthEC (HEC), a healthcare technology company, revealed a '
                'data breach that affected 4.5 million clients of its '
                'partners. HEC found out that an unidentified actor had copied '
                'some files and accessed several of its systems. Information '
                "belonging to a few of HEC's clients was found in the files. "
                'The healthcare company started informing affected clients and '
                'collaborated with them to inform other people who might be '
                'affected. HealthEC advises those who may be affected to '
                'maintain their vigilance against potential fraud and identity '
                'theft.',
 'impact': {'data_compromised': ['Client Information'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Several Systems']},
 'motivation': 'Data Theft',
 'recommendations': 'Maintain vigilance against potential fraud and identity '
                    'theft',
 'response': {'communication_strategy': 'Informing affected clients and '
                                        'collaborating to inform others'},
 'threat_actor': 'Unidentified',
 'title': 'HealthEC Data Breach',
 'type': 'Data Breach'}