Health PEI suffered a data breach incident after an employee’s laptop was stolen, containing information about more than 4,000 patients and more than 1,200 employees in April 2022.
The laptop contained the information about the patients’ visits to PEI emergency departments including the reason for the visit, the diagnosis, and the name of the treating physician. Names, dates of birth, health card numbers, gender, and postal code.
It also contained the personal information belonging to more than 1,200 Health PEI long-term care staff was also on the laptop, including names, positions, hours worked and rate of pay.
Health PEI sent letters to all those whose information was breached in the incident.
Source: https://www.cbc.ca/news/canada/prince-edward-island/pei-covid-privacy-health-hiv-1.6435748
TPRM report: https://scoringcyber.rankiteo.com/company/health-pei
"id": "hea14717822",
"linkid": "health-pei",
"type": "Breach",
"date": "04/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': ['More than 4,000 patients',
'More than 1,200 employees'],
'industry': 'Healthcare',
'location': 'Prince Edward Island',
'name': 'Health PEI',
'type': 'Healthcare Organization'}],
'attack_vector': 'Theft of Laptop',
'data_breach': {'number_of_records_exposed': ['More than 4,000 patients',
'More than 1,200 employees'],
'personally_identifiable_information': ['Names',
'Dates of birth',
'Health card numbers',
'Gender',
'Postal code',
'Positions',
'Hours worked',
'Rate of pay'],
'type_of_data_compromised': ['Visit details to PEI emergency '
'departments',
'Personal information']},
'date_detected': 'April 2022',
'description': 'Health PEI suffered a data breach incident after an '
'employee’s laptop was stolen, containing information about '
'more than 4,000 patients and more than 1,200 employees in '
'April 2022.',
'impact': {'data_compromised': ["Patients' visit details to PEI emergency "
'departments',
'Personal information of patients and staff']},
'response': {'communication_strategy': 'Letters sent to all affected '
'individuals'},
'title': 'Health PEI Data Breach',
'type': 'Data Breach'}