A medical marijuana dispensary suffered a data breach that compromised the personal information of patients that ended up in a pile of trash on a public sidewalk.
The documents were found near 31st Avenue and Peoria documents weren’t shredded and were laid out in the open.
The company started shredding patient information before disposing of it in the trash and started investigating the attack.
Source: https://www.databreaches.net/medical-marijuana-patients-personal-information-found-in-trash-pile/
TPRM report: https://scoringcyber.rankiteo.com/company/medical-marijuana-inc-
"id": "med6305622",
"linkid": "medical-marijuana-inc-",
"type": "Breach",
"date": "10/2016",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Near 31st Avenue and Peoria',
'type': 'Medical Marijuana Dispensary'}],
'attack_vector': 'Physical Security',
'data_breach': {'file_types_exposed': 'Physical Documents',
'personally_identifiable_information': True,
'type_of_data_compromised': 'Personal Information'},
'description': 'A medical marijuana dispensary suffered a data breach that '
'compromised the personal information of patients that ended '
'up in a pile of trash on a public sidewalk.',
'impact': {'data_compromised': 'Personal Information of Patients'},
'investigation_status': 'Under Investigation',
'lessons_learned': 'Importance of proper disposal of sensitive information',
'post_incident_analysis': {'corrective_actions': 'Shredding patient '
'information before disposal',
'root_causes': 'Improper disposal of sensitive '
'information'},
'recommendations': 'Implement strict physical security measures and proper '
'disposal protocols',
'response': {'remediation_measures': 'Started shredding patient information '
'before disposal'},
'title': 'Data Breach at Medical Marijuana Dispensary',
'type': 'Data Breach',
'vulnerability_exploited': 'Improper Disposal of Sensitive Information'}