Legacy Community Health

The data of more than 22800 patients were leaked in a breach attack on Legacy Community Health Services.

The compromised email account of an employee gave access to patient names, dates of service, and health information related to care at Legacy to the hackers.

Source: https://www.hipaajournal.com/228000-individuals-impacted-by-legacy-community-health-services-phishing-attack/

TPRM report: https://scoringcyber.rankiteo.com/company/legacy-community-health-services

"id": "leg2368222",
"linkid": "legacy-community-health-services",
"type": "Breach",
"date": "07/2020",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 22800,
                        'industry': 'Healthcare',
                        'name': 'Legacy Community Health Services',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Compromised Email Account',
 'data_breach': {'number_of_records_exposed': 22800,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Patient Names',
                                              'Dates of Service',
                                              'Health Information']},
 'description': 'The data of more than 22800 patients were leaked in a breach '
                'attack on Legacy Community Health Services. The compromised '
                'email account of an employee gave access to patient names, '
                'dates of service, and health information related to care at '
                'Legacy to the hackers.',
 'impact': {'data_compromised': ['Patient Names',
                                 'Dates of Service',
                                 'Health Information']},
 'initial_access_broker': {'entry_point': 'Compromised Email Account'},
 'title': 'Data Breach at Legacy Community Health Services',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Account Compromise'}