Mount Desert Island Hospital in Maine suffered from a breach to HHS that affected 24,180 patients.
The compromised information includes name, address, date of birth, driver’s license/state identification number, Social Security number, financial account information, medical record number, Medicare or Medicaid identification number, mental or physical treatment/condition information, diagnosis code/information, date of service, admission/discharge date, prescription information, billing/claims information, personal representative or guardian name, and health insurance information.
They revised data protection rules and processes, added more security measures, and collaborated with outside experts to resecure their network.
TPRM report: https://scoringcyber.rankiteo.com/company/mount-desert-island-hospital
"id": "mou19592723",
"linkid": "mount-desert-island-hospital",
"type": "Breach",
"date": "07/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'customers_affected': '24,180 patients',
'industry': 'Healthcare',
'location': 'Maine',
'name': 'Mount Desert Island Hospital',
'type': 'Hospital'}],
'data_breach': {'number_of_records_exposed': '24,180',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['name',
'address',
'date of birth',
'driver’s license/state '
'identification number',
'Social Security number',
'financial account information',
'medical record number',
'Medicare or Medicaid '
'identification number',
'mental or physical '
'treatment/condition information',
'diagnosis code/information',
'date of service',
'admission/discharge date',
'prescription information',
'billing/claims information',
'personal representative or '
'guardian name',
'health insurance information']},
'description': 'Mount Desert Island Hospital in Maine suffered from a breach '
'to HHS that affected 24,180 patients. The compromised '
'information includes name, address, date of birth, driver’s '
'license/state identification number, Social Security number, '
'financial account information, medical record number, '
'Medicare or Medicaid identification number, mental or '
'physical treatment/condition information, diagnosis '
'code/information, date of service, admission/discharge date, '
'prescription information, billing/claims information, '
'personal representative or guardian name, and health '
'insurance information.',
'impact': {'data_compromised': ['name',
'address',
'date of birth',
'driver’s license/state identification number',
'Social Security number',
'financial account information',
'medical record number',
'Medicare or Medicaid identification number',
'mental or physical treatment/condition '
'information',
'diagnosis code/information',
'date of service',
'admission/discharge date',
'prescription information',
'billing/claims information',
'personal representative or guardian name',
'health insurance information']},
'response': {'remediation_measures': ['revised data protection rules and '
'processes',
'added more security measures',
'collaborated with outside experts to '
'resecure their network'],
'third_party_assistance': True},
'title': 'Data Breach at Mount Desert Island Hospital',
'type': 'Data Breach'}