Helse Sør-Øst RHF

The healthcare organisation responsible for overseeing hospitals in the southeast of Norway, called Health South-East RHF, has announced that there was a security breach that exposed private information belonging to over 50% of the population.

HelseCERT, the national healthcare security centre, released a statement about the event after discovering unusual behaviour against local computer systems.

The security vulnerability, according to HelseCert, was caused by an attack carried out by skilled and knowledgeable hackers.

Authorities and experts surmise that the Health South-East RHF data breach may have been the consequence of a foreign state's cyber espionage effort, which aimed to obtain information about politicians, government employees, and members of the armed forces.

Source: https://securityaffairs.com/67922/data-breach/health-south-east-rhf-databreach.html

TPRM report: https://scoringcyber.rankiteo.com/company/helse-sor-ost-rhf

"id": "hel448181223",
"linkid": "helse-sor-ost-rhf",
"type": "Breach",
"date": "01/2018",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 'Over 50% of the population',
                        'industry': 'Healthcare',
                        'location': 'Southeast of Norway',
                        'name': 'Health South-East RHF',
                        'type': 'Healthcare Organisation'}],
 'data_breach': {'type_of_data_compromised': 'Private information'},
 'description': 'The healthcare organisation responsible for overseeing '
                'hospitals in the southeast of Norway, called Health '
                'South-East RHF, has announced that there was a security '
                'breach that exposed private information belonging to over 50% '
                'of the population.',
 'impact': {'data_compromised': 'Private information'},
 'initial_access_broker': {'high_value_targets': ['Politicians',
                                                  'Government employees',
                                                  'Members of the armed '
                                                  'forces']},
 'motivation': 'Cyber espionage to obtain information about politicians, '
               'government employees, and members of the armed forces.',
 'references': [{'source': 'HelseCERT'}],
 'threat_actor': 'Skilled and knowledgeable hackers',
 'title': 'Data Breach at Health South-East RHF',
 'type': 'Data Breach'}