HealthReach Community Health Centers

The Maine Attorney General's Office reported a data breach involving HealthReach Community Health Centers on September 9, 2021. The breach, which occurred on or about May 7, 2021, involved the improper disposal of hard drives containing sensitive information of approximately 101,395 Maine residents, including names, addresses, social security numbers, and medical records. Identity theft protection services were offered for 12 months.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aa904682-5a4f-45fb-bd4d-79095854623d.shtml

TPRM report: https://www.rankiteo.com/company/healthreach-community-health

"id": "hea724072825",
"linkid": "healthreach-community-health",
"type": "Breach",
"date": "5/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 101395,
                        'industry': 'Healthcare',
                        'location': 'Maine',
                        'name': 'HealthReach Community Health Centers',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Improper Disposal',
 'data_breach': {'number_of_records_exposed': 101395,
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'social security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'social security numbers',
                                              'medical records']},
 'date_detected': '2021-05-07',
 'date_publicly_disclosed': '2021-09-09',
 'description': "The Maine Attorney General's Office reported a data breach "
                'involving HealthReach Community Health Centers on September '
                '9, 2021. The breach, which occurred on or about May 7, 2021, '
                'involved the improper disposal of hard drives containing '
                'sensitive information of approximately 101,395 Maine '
                'residents, including names, addresses, social security '
                'numbers, and medical records. Identity theft protection '
                'services were offered for 12 months.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'social security numbers',
                                 'medical records'],
            'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2021-09-09',
                 'source': "Maine Attorney General's Office"}],
 'response': {'remediation_measures': ['Identity theft protection services '
                                       'offered for 12 months']},
 'title': 'Data Breach at HealthReach Community Health Centers',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Physical Security'}