New Jersey Brain & Spine

New Jersey Brain & Spine (NJBS) suffered a data breach due to an external system hack, discovered on November 16, 2021, though the incident occurred four days prior. The breach compromised sensitive personal data, including Social Security numbers, affecting 92,453 individuals, among them 10 Maine residents. The exposure of such highly sensitive information poses a severe risk of identity theft and financial fraud. In response, NJBS offered identity theft protection services to the impacted individuals starting April 8, 2022, nearly five months after the breach. The delay in detection and mitigation, combined with the nature of the stolen data, underscores the breach’s critical severity, particularly given the healthcare sector’s regulatory and ethical obligations to safeguard patient information.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9fe850ee-d69c-4e66-9af5-08f427598b10.shtml

TPRM report: https://www.rankiteo.com/company/neurosurgeons-of-new-jersey

"id": "neu1003091725",
"linkid": "neurosurgeons-of-new-jersey",
"type": "Breach",
"date": "11/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 92453,
                        'industry': 'Healthcare',
                        'location': 'New Jersey, USA',
                        'name': 'New Jersey Brain & Spine (NJBS)',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'External System Hack',
 'customer_advisories': 'Identity theft protection services offered to '
                        'affected individuals (starting April 8, 2022)',
 'data_breach': {'number_of_records_exposed': 92453,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (Personally Identifiable '
                                        'Information)',
                 'type_of_data_compromised': ['Social Security numbers']},
 'date_detected': '2021-11-16',
 'description': 'The Maine Office of the Attorney General reported that New '
                'Jersey Brain & Spine (NJBS) experienced a data breach '
                'involving an external system hack. The breach affected a '
                'total of 92,453 individuals, including 10 residents of Maine. '
                'The breached data included Social Security numbers, and '
                'identity theft protection services were offered to the '
                'affected individuals starting April 8, 2022.',
 'impact': {'data_compromised': ['Social Security numbers'],
            'identity_theft_risk': 'High (Identity theft protection services '
                                   'offered)',
            'systems_affected': ['External System']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to the Maine '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Identity theft protection services '
                                        'offered to affected individuals '
                                        '(starting April 8, 2022)'},
 'title': 'New Jersey Brain & Spine (NJBS) Data Breach',
 'type': 'Data Breach'}