Morris Hospital

Morris Hospital & Healthcare Centers (Morris Hospital) suffered from a data incident which exposed 248,943 current and former patients of Morris Hospital and current and former employees and their dependents or beneficiaries.

The exposed information includes names, addresses, dates of birth, social security numbers, medical record numbers and account numbers, and diagnostic codes of current and former healthcare patients at Morris Hospital AND the names, addresses, social security numbers, and dates of birth of current and former employees and their dependents and beneficiaries.

They immediately reset passwords for all employee accounts and suspended mobile email access. In addition, they identified and removed malicious files, and enhanced their monitoring, logging, and detection capabilities.

Source: https://www.databreaches.net/il-morris-hospital-discloses-breach-that-royal-claimed-responsibility-for-in-may-notifies-248943/

TPRM report: https://scoringcyber.rankiteo.com/company/morris-hospital

"id": "mor123420823",
"linkid": "morris-hospital",
"type": "Data Leak",
"date": "04/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 248943,
                        'industry': 'Healthcare',
                        'name': 'Morris Hospital & Healthcare Centers',
                        'type': 'Hospital'}],
 'data_breach': {'number_of_records_exposed': 248943,
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'dates of birth',
                                                         'social security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'description': 'Morris Hospital & Healthcare Centers (Morris Hospital) '
                'suffered from a data incident which exposed 248,943 current '
                'and former patients of Morris Hospital and current and former '
                'employees and their dependents or beneficiaries. The exposed '
                'information includes names, addresses, dates of birth, social '
                'security numbers, medical record numbers and account numbers, '
                'and diagnostic codes of current and former healthcare '
                'patients at Morris Hospital AND the names, addresses, social '
                'security numbers, and dates of birth of current and former '
                'employees and their dependents and beneficiaries.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'dates of birth',
                                 'social security numbers',
                                 'medical record numbers',
                                 'account numbers',
                                 'diagnostic codes']},
 'response': {'containment_measures': ['reset passwords for all employee '
                                       'accounts',
                                       'suspended mobile email access'],
              'enhanced_monitoring': ['enhanced monitoring, logging, and '
                                      'detection capabilities'],
              'remediation_measures': ['identified and removed malicious '
                                       'files']},
 'title': 'Data Breach at Morris Hospital & Healthcare Centers',
 'type': 'Data Breach'}