Memorial Hospital at Gulfport

Memorial Hospital at Gulfport announced that they have become a victim of a data breach that includes information of 30000 patients through an employee email account that a third party accessed.

The hospital’s manager of marketing and communications said the email account contained information on about 30,000 patients, including names, birth dates, medical care, and health insurance information.

Memorial Hospital offered free credit monitoring and identity protection services to a “limited number” of patients whose Social Security numbers, health insurance information, and other personal details were accessed.

Source: https://www.databreaches.net/memorial-hospital-at-gulfport-phishing-incident-exposed-30000-patients-information/

TPRM report: https://scoringcyber.rankiteo.com/company/memorial-hospital-at-gulfport

"id": "mem144118223",
"linkid": "memorial-hospital-at-gulfport",
"type": "Data Leak",
"date": "02/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 30000,
                        'industry': 'Healthcare',
                        'location': 'Gulfport',
                        'name': 'Memorial Hospital at Gulfport',
                        'type': 'Hospital'}],
 'attack_vector': 'Email Account Compromise',
 'customer_advisories': 'Free credit monitoring and identity protection '
                        "services offered to a 'limited number' of patients "
                        'whose Social Security numbers, health insurance '
                        'information, and other personal details were '
                        'accessed.',
 'data_breach': {'number_of_records_exposed': 30000,
                 'personally_identifiable_information': ['Names',
                                                         'Birth Dates',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Birth Dates',
                                              'Medical Care',
                                              'Health Insurance Information',
                                              'Social Security numbers']},
 'description': 'Memorial Hospital at Gulfport announced that they have become '
                'a victim of a data breach that includes information of 30000 '
                'patients through an employee email account that a third party '
                'accessed.',
 'impact': {'data_compromised': ['Names',
                                 'Birth Dates',
                                 'Medical Care',
                                 'Health Insurance Information',
                                 'Social Security numbers'],
            'identity_theft_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'source': 'Memorial Hospital at Gulfport'}],
 'threat_actor': 'Unknown Third Party',
 'title': 'Memorial Hospital at Gulfport Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unsecured Email Account'}