Maxim Healthcare

Maxim Healthcare Group, including Maxim Healthcare Services and Maxim Healthcare Staffing (collectively “Maxim Healthcare”) became aware of a data breach incident after it suffered unusual activity related to several employees’ email accounts.

The personal information that was accessed by an unauthorized actor included name, address, date of birth, contact information, medical history, medical condition or treatment information, medical record number, diagnosis code, patient account number, Medicare/Medicaid number, and username/password.

Maxim Healthcare took additional security protocols, including the implementation of Multi-Factor Authentication for all email accounts, and transitioned to a new Security Operations Center with advanced detection and response capabilities.

Source: https://www.databreaches.net/maxim-healthcare-notifies-patients-of-breach-that-occurred-in-october-2020/

TPRM report: https://scoringcyber.rankiteo.com/company/maxim-healthcare

"id": "max22181222",
"linkid": "maxim-healthcare",
"type": "Data Leak",
"date": "11/2021",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Maxim Healthcare Group',
                        'type': 'Healthcare'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Medical Information']},
 'description': 'Maxim Healthcare Group, including Maxim Healthcare Services '
                'and Maxim Healthcare Staffing (collectively “Maxim '
                'Healthcare”) became aware of a data breach incident after it '
                'suffered unusual activity related to several employees’ email '
                'accounts.',
 'impact': {'data_compromised': ['Name',
                                 'Address',
                                 'Date of Birth',
                                 'Contact Information',
                                 'Medical History',
                                 'Medical Condition or Treatment Information',
                                 'Medical Record Number',
                                 'Diagnosis Code',
                                 'Patient Account Number',
                                 'Medicare/Medicaid Number',
                                 'Username/Password'],
            'systems_affected': 'Email Accounts'},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'response': {'remediation_measures': ['Implementation of Multi-Factor '
                                       'Authentication for all email accounts',
                                       'Transition to a new Security '
                                       'Operations Center with advanced '
                                       'detection and response capabilities']},
 'threat_actor': 'Unauthorized Actor',
 'title': 'Maxim Healthcare Data Breach',
 'type': 'Data Breach'}