Nebraska Medicine

Nebraska Medicine was struck with a ransomware attack that led to the data theft and compromise of information from 219,000 patients.

The attack affected a number of its sites, including Great Plains Health and hospital branches in Hastings, Norfolk, and Beatrice.

A limited number of patients from Faith Regional Health Services, Great Plains Health, and Mary Lanning Healthcare were also affected, as the data was stored in the Nebraska Medicine/UNMC network.

The compromised data included names, contact information, dates of birth, health insurance information, medical record numbers, and clinical data, such as physician notes, lab results, imaging, diagnoses, treatments, and prescription data.

Source: https://www.ketv.com/article/nebraska-medicine-dealing-with-security-incident-affecting-it-systems/34100473#

TPRM report: https://scoringcyber.rankiteo.com/company/nebraskamed

"id": "neb0121122",
"linkid": "nebraskamed",
"type": "Ransomware",
"date": "09/2020",
"severity": "75",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 219000,
                        'industry': 'Healthcare',
                        'location': 'Nebraska',
                        'name': 'Nebraska Medicine',
                        'type': 'Healthcare'},
                       {'industry': 'Healthcare',
                        'name': 'Great Plains Health',
                        'type': 'Healthcare'},
                       {'industry': 'Healthcare',
                        'name': 'Faith Regional Health Services',
                        'type': 'Healthcare'},
                       {'industry': 'Healthcare',
                        'name': 'Mary Lanning Healthcare',
                        'type': 'Healthcare'}],
 'attack_vector': 'Ransomware',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 219000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'contact information',
                                              'dates of birth',
                                              'health insurance information',
                                              'medical record numbers',
                                              'clinical data']},
 'description': 'Nebraska Medicine was struck with a ransomware attack that '
                'led to the data theft and compromise of information from '
                '219,000 patients. The attack affected a number of its sites, '
                'including Great Plains Health and hospital branches in '
                'Hastings, Norfolk, and Beatrice. A limited number of patients '
                'from Faith Regional Health Services, Great Plains Health, and '
                'Mary Lanning Healthcare were also affected, as the data was '
                'stored in the Nebraska Medicine/UNMC network. The compromised '
                'data included names, contact information, dates of birth, '
                'health insurance information, medical record numbers, and '
                'clinical data, such as physician notes, lab results, imaging, '
                'diagnoses, treatments, and prescription data.',
 'impact': {'data_compromised': ['names',
                                 'contact information',
                                 'dates of birth',
                                 'health insurance information',
                                 'medical record numbers',
                                 'clinical data']},
 'motivation': 'Data Theft',
 'ransomware': {'data_exfiltration': True},
 'title': 'Nebraska Medicine Ransomware Attack',
 'type': 'Ransomware Attack'}