Memorial Hermann Health System

Memorial Hermann Health System notified thousands of its customers of the data breach after one of its contracted vendors, Advent Health Partners, suffered a cyber attack.

Unauthorized access and suspicious activities were noticed on an employee's email accounts with data from Memorial Hermann including PHI: first names, last names, dates of birth, social security numbers, financial and medical information.

All the impacted customers were notified and given free credit monitoring services.

Source: https://www.msn.com/en-us/health/medical/information-for-over-6-000-memorial-hermann-patients-accessed-in-security-breach/ar-AATCxBQ

TPRM report: https://scoringcyber.rankiteo.com/company/memorialhermann

"id": "mem12145522",
"linkid": "memorialhermann",
"type": "Breach",
"date": "02/2022",
"severity": "90",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'thousands',
                        'industry': 'Healthcare',
                        'name': 'Memorial Hermann Health System',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'personally_identifiable_information': ['first names',
                                                         'last names',
                                                         'dates of birth',
                                                         'social security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PHI', 'Financial Information']},
 'description': 'Memorial Hermann Health System notified thousands of its '
                'customers of the data breach after one of its contracted '
                'vendors, Advent Health Partners, suffered a cyber attack. '
                'Unauthorized access and suspicious activities were noticed on '
                "an employee's email accounts with data from Memorial Hermann "
                'including PHI: first names, last names, dates of birth, '
                'social security numbers, financial and medical information. '
                'All the impacted customers were notified and given free '
                'credit monitoring services.',
 'impact': {'data_compromised': ['first names',
                                 'last names',
                                 'dates of birth',
                                 'social security numbers',
                                 'financial information',
                                 'medical information']},
 'initial_access_broker': {'entry_point': 'Email Compromise'},
 'response': {'communication_strategy': 'Notified all impacted customers and '
                                        'offered free credit monitoring '
                                        'services'},
 'title': 'Memorial Hermann Health System Data Breach',
 'type': 'Data Breach'}