Health Plan of San Joaquin

Health Plan of San Joaquin (HPSJ) was affected by some unusual activity through its email system accessed by an unknown person.

The compromised information includes member name, HPSJ member ID number, claim ID number, date of birth, lab results, medical ID number, prescription information, treatment information, driver’s license or another government-issued ID number, financial account information, health insurance information, medical record number (MRN), username and password, prescription ID number, and Social Security number.

They investigated the incident and notified the affected and also offered 12 months of credit monitoring with Equifax.

Source: https://www.databreaches.net/health-plan-of-san-joaquin-notifying-more-than-420000-of-email-hack-last-year/

TPRM report: https://scoringcyber.rankiteo.com/company/hpsj

"id": "hea16393123",
"linkid": "hpsj",
"type": "Data Leak",
"date": "10/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'San Joaquin, California',
                        'name': 'Health Plan of San Joaquin',
                        'type': 'Healthcare'}],
 'attack_vector': 'Email System Compromise',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)',
                                              'Financial Information']},
 'description': 'Health Plan of San Joaquin (HPSJ) experienced unusual '
                'activity through its email system accessed by an unknown '
                'person. The compromised information includes member name, '
                'HPSJ member ID number, claim ID number, date of birth, lab '
                'results, medical ID number, prescription information, '
                'treatment information, driver’s license or another '
                'government-issued ID number, financial account information, '
                'health insurance information, medical record number (MRN), '
                'username and password, prescription ID number, and Social '
                'Security number.',
 'impact': {'data_compromised': ['Member name',
                                 'HPSJ member ID number',
                                 'Claim ID number',
                                 'Date of birth',
                                 'Lab results',
                                 'Medical ID number',
                                 'Prescription information',
                                 'Treatment information',
                                 'Driver’s license or another '
                                 'government-issued ID number',
                                 'Financial account information',
                                 'Health insurance information',
                                 'Medical record number (MRN)',
                                 'Username and password',
                                 'Prescription ID number',
                                 'Social Security number'],
            'systems_affected': 'Email System'},
 'response': {'communication_strategy': 'Notified affected individuals and '
                                        'offered 12 months of credit '
                                        'monitoring with Equifax'},
 'threat_actor': 'Unknown',
 'title': 'Unauthorized Access to Health Plan of San Joaquin Email System',
 'type': 'Data Breach'}