On April 12, 2024, the Vermont Office of the Attorney General reported that North Country Hospital experienced a potential data breach on February 28, 2024, involving unauthorized removal of patient records by a former employee. The compromised information potentially included patient names, dates of birth, medical record numbers, and medical information; however, the exact number of individuals affected is unknown, and there is no confirmation of whether any personal information was actually removed.
Source: https://ago.vermont.gov/document/2024-04-12-north-country-hospital-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/north-country-hospital
"id": "nor723072925",
"linkid": "north-country-hospital",
"type": "Breach",
"date": "2/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Vermont',
'name': 'North Country Hospital',
'type': 'Healthcare'}],
'attack_vector': 'Insider Threat',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Patient names',
'Dates of birth',
'Medical record numbers',
'Medical information']},
'date_detected': '2024-02-28',
'date_publicly_disclosed': '2024-04-12',
'description': 'Unauthorized removal of patient records by a former employee.',
'impact': {'data_compromised': ['Patient names',
'Dates of birth',
'Medical record numbers',
'Medical information']},
'references': [{'date_accessed': '2024-04-12',
'source': 'Vermont Office of the Attorney General'}],
'threat_actor': 'Former Employee',
'title': 'North Country Hospital Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Access'}