HealthcareSource HR, Inc.

The Maine Office of the Attorney General reported a data breach involving HealthcareSource HR, Inc. on May 26, 2021. The breach occurred due to a misconfiguration in their talent management software, affecting 451 individuals, with potential disclosure of their Social Security Numbers from April 20 to April 21, 2021. In response, HealthcareSource corrected the misconfiguration and offered one year of identity theft protection services through Experian.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/94c509b5-170f-4cac-916a-bf7abd6c8c8f.shtml

TPRM report: https://www.rankiteo.com/company/healthcaresource

"id": "hea128072925",
"linkid": "healthcaresource",
"type": "Breach",
"date": "4/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 451,
                        'industry': 'Healthcare',
                        'name': 'HealthcareSource HR, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Misconfiguration',
 'data_breach': {'number_of_records_exposed': 451,
                 'personally_identifiable_information': 'Social Security '
                                                        'Numbers',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Social Security Numbers'},
 'date_detected': '2021-04-20',
 'date_publicly_disclosed': '2021-05-26',
 'description': 'A data breach occurred due to a misconfiguration in the '
                'talent management software, affecting 451 individuals with '
                'potential disclosure of their Social Security Numbers.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Talent management software']},
 'post_incident_analysis': {'corrective_actions': 'Corrected the '
                                                  'misconfiguration and '
                                                  'offered identity theft '
                                                  'protection services',
                            'root_causes': 'Misconfiguration in talent '
                                           'management software'},
 'references': [{'date_accessed': '2021-05-26',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'containment_measures': 'Corrected the misconfiguration',
              'remediation_measures': 'Offered one year of identity theft '
                                      'protection services',
              'third_party_assistance': ['Experian']},
 'title': 'Data Breach at HealthcareSource HR, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Misconfiguration in talent management software'}