JASACare, a New York-based home care services provider suffered a massive data breach that gain access to its email system and steal money from corporate accounts by making fraudulent bank transfers.
The exposed data included employee’s email account, patient names, addresses, phone numbers, dates of birth, health insurance information, Social Security numbers, and JASACare account balances.
The JASACare immediately took action and provided all affected individuals with a year of credit monitoring services without charge.
Source: https://www.hipaajournal.com/jasacare-email-system-breach-impacts-1154-patients-3370/
TPRM report: https://scoringcyber.rankiteo.com/company/jana-care
"id": "jan14119522",
"linkid": "jana-care",
"type": "Breach",
"date": "03/2016",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'New York',
'name': 'JASACare',
'type': 'Home Care Services Provider'}],
'attack_vector': 'Email System Compromise',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Employee email accounts',
'Patient names',
'Addresses',
'Phone numbers',
'Dates of birth',
'Health insurance information',
'Social Security numbers',
'JASACare account balances']},
'description': 'JASACare, a New York-based home care services provider '
'suffered a massive data breach that gained access to its '
'email system and stole money from corporate accounts by '
'making fraudulent bank transfers.',
'impact': {'data_compromised': ['Employee email accounts',
'Patient names',
'Addresses',
'Phone numbers',
'Dates of birth',
'Health insurance information',
'Social Security numbers',
'JASACare account balances'],
'systems_affected': 'Email System'},
'initial_access_broker': {'entry_point': 'Email System'},
'motivation': 'Financial Gain',
'response': {'remediation_measures': 'Provided all affected individuals with '
'a year of credit monitoring services '
'without charge'},
'title': 'JASACare Data Breach',
'type': 'Data Breach'}