National Association of Community Health Centers (NACHC)

The data of 935 current and former employees of the National Association of Community Health Centers was breached in a cyber attack.

The threat actors accessed its systems and encrypted several servers as part of a coordinated cyberattack.

The servers contained the data including employee names, addresses, dates of birth, salary, Social Security numbers, emergency contact names, and employee start dates.

NACHC offered 24 months of identity protection services including credit monitoring, an insurance reimbursement policy, and fully managed identity theft recovery services to the affected persons.

Source: https://www.databreaches.net/national-association-of-community-health-centers-to-notify-current-and-former-employees-of-data-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/nachc

"id": "nat123322422",
"linkid": "nachc",
"type": "Cyber Attack",
"date": "12/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': ['935 current and former '
                                               'employees'],
                        'industry': 'Healthcare',
                        'name': 'National Association of Community Health '
                                'Centers',
                        'type': 'Non-profit organization'}],
 'attack_vector': 'Coordinated cyberattack',
 'data_breach': {'number_of_records_exposed': '935',
                 'personally_identifiable_information': ['Employee names',
                                                         'Addresses',
                                                         'Dates of birth',
                                                         'Social Security '
                                                         'numbers',
                                                         'Emergency contact '
                                                         'names'],
                 'sensitivity_of_data': ['High'],
                 'type_of_data_compromised': ['Employee names',
                                              'Addresses',
                                              'Dates of birth',
                                              'Salary',
                                              'Social Security numbers',
                                              'Emergency contact names',
                                              'Employee start dates']},
 'description': 'The data of 935 current and former employees of the National '
                'Association of Community Health Centers was breached in a '
                'cyber attack. The threat actors accessed its systems and '
                'encrypted several servers as part of a coordinated '
                'cyberattack. The servers contained the data including '
                'employee names, addresses, dates of birth, salary, Social '
                'Security numbers, emergency contact names, and employee start '
                'dates. NACHC offered 24 months of identity protection '
                'services including credit monitoring, an insurance '
                'reimbursement policy, and fully managed identity theft '
                'recovery services to the affected persons.',
 'impact': {'data_compromised': ['Employee names',
                                 'Addresses',
                                 'Dates of birth',
                                 'Salary',
                                 'Social Security numbers',
                                 'Emergency contact names',
                                 'Employee start dates'],
            'identity_theft_risk': ['High'],
            'systems_affected': ['Several servers']},
 'ransomware': {'data_encryption': ['Several servers']},
 'response': {'communication_strategy': ['Offered 24 months of identity '
                                         'protection services including credit '
                                         'monitoring, an insurance '
                                         'reimbursement policy, and fully '
                                         'managed identity theft recovery '
                                         'services']},
 'title': 'Data Breach at National Association of Community Health Centers',
 'type': 'Data Breach'}