Kan.-based Newman Regional Health fell victim to an email breach incident that compromised its patient health information.
An unauthorized party accessed some of its email accounts" between Jan. 26, 2021, and Nov. 23, 2021.
Those accounts contained identifiable protected health information of patients, including names, dates of birth, medical record or other identification numbers, contact details, limited heath, treatment or insurance information, employee information, and Social Security number.
The regional health investigated the incident after knowing that breached information was misused.
TPRM report: https://scoringcyber.rankiteo.com/company/nrhemporia
"id": "new213217522",
"linkid": "nrhemporia",
"type": "Breach",
"date": "11/2021",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Healthcare',
'location': 'Kansas',
'name': 'Newman Regional Health',
'type': 'Healthcare'}],
'attack_vector': 'Email Account Access',
'data_breach': {'personally_identifiable_information': ['Names',
'Dates of Birth',
'Medical Record or '
'Other Identification '
'Numbers',
'Contact Details',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Health Information',
'Employee Information']},
'date_detected': 'Nov. 23, 2021',
'description': 'Newman Regional Health experienced an email breach incident '
'that compromised patient health information. An unauthorized '
'party accessed some of its email accounts between Jan. 26, '
'2021, and Nov. 23, 2021. The accounts contained identifiable '
'protected health information of patients, including names, '
'dates of birth, medical record or other identification '
'numbers, contact details, limited health, treatment or '
'insurance information, employee information, and Social '
'Security numbers. The incident was investigated after it was '
'discovered that the breached information was misused.',
'impact': {'data_compromised': ['Names',
'Dates of Birth',
'Medical Record or Other Identification '
'Numbers',
'Contact Details',
'Limited Health, Treatment or Insurance '
'Information',
'Employee Information',
'Social Security Numbers']},
'initial_access_broker': {'entry_point': 'Email Accounts'},
'investigation_status': 'Investigated',
'title': 'Email Breach at Newman Regional Health',
'type': 'Email Breach'}