Kootenai Health

Kootenai Health experienced a significant data breach when the 3AM ransomware gang leaked the personal information of over 464,000 patients. The attackers accessed sensitive data including Social Security numbers, medical records, and insurance information, causing a potential risk for identity theft and financial fraud. The breach, which began with network disruption, led to an extensive review and the implementation of additional security measures. The organization is offering credit monitoring and identity theft protection to affected individuals.

Source: https://securityaffairs.com/167020/data-breach/kootenai-health-data-breach.html

TPRM report: https://scoringcyber.rankiteo.com/company/kootenai-health

"id": "koo000081524",
"linkid": "kootenai-health",
"type": "Ransomware",
"date": "8/2024",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 464000,
                        'industry': 'Healthcare',
                        'name': 'Kootenai Health',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Ransomware',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 464000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'Medical records',
                                              'Insurance information']},
 'description': 'Kootenai Health experienced a significant data breach when '
                'the 3AM ransomware gang leaked the personal information of '
                'over 464,000 patients. The attackers accessed sensitive data '
                'including Social Security numbers, medical records, and '
                'insurance information, causing a potential risk for identity '
                'theft and financial fraud. The breach, which began with '
                'network disruption, led to an extensive review and the '
                'implementation of additional security measures. The '
                'organization is offering credit monitoring and identity theft '
                'protection to affected individuals.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 'Medical records',
                                 'Insurance information'],
            'identity_theft_risk': 'High'},
 'motivation': 'Financial Fraud, Identity Theft',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': '3AM'},
 'response': {'recovery_measures': 'Offering credit monitoring and identity '
                                   'theft protection',
              'remediation_measures': 'Implementation of additional security '
                                      'measures'},
 'threat_actor': '3AM ransomware gang',
 'title': 'Kootenai Health Data Breach',
 'type': 'Data Breach'}