Meditab Software Inc. suffered a massive breach of protected health information on March 2019.
The data revealed contained highly sensitive information such as names, addresses, dates of birth, insurance information, payment information, Social Security numbers, doctor’s notes, prescription details, diagnoses, lab test results, and medical histories.
After being alerted to the breach, the fax server was taken offline, and an investigation was launched to identify the cause of the breach.
It is unclear how long the server was left unprotected and how many patients have been affected by the breach.
Source: https://www.hipaajournal.com/potentially-massive-breach-of-protected-health-information-discovered/
TPRM report: https://scoringcyber.rankiteo.com/company/meditab-software-inc-
"id": "med65512323",
"linkid": "meditab-software-inc-",
"type": "Breach",
"date": "03/2019",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Healthcare Software',
'name': 'Meditab Software Inc.',
'type': 'Company'}],
'attack_vector': 'Fax Server Vulnerability',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Health Information',
'Financial Information']},
'date_detected': 'March 2019',
'description': 'Meditab Software Inc. suffered a massive breach of protected '
'health information in March 2019. The data revealed contained '
'highly sensitive information such as names, addresses, dates '
'of birth, insurance information, payment information, Social '
'Security numbers, doctor’s notes, prescription details, '
'diagnoses, lab test results, and medical histories.',
'impact': {'data_compromised': ['names',
'addresses',
'dates of birth',
'insurance information',
'payment information',
'Social Security numbers',
'doctor’s notes',
'prescription details',
'diagnoses',
'lab test results',
'medical histories'],
'systems_affected': 'Fax Server'},
'investigation_status': 'Ongoing',
'response': {'containment_measures': ['Fax server taken offline'],
'remediation_measures': ['Investigation launched']},
'title': 'Meditab Software Inc. Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unprotected Fax Server'}