North Bay Parry Sound District Health Unit

The North Bay Parry Sound District Health Unit (“Health Unit”) became a victim of a privacy breach in relation to its online COVID-19 dashboard.

The dashboard contained information related to the number of COVID-19 tests and confirmed cases in the local community.

Inadvertently, personally identifying information was made accessible through the dashboard.

Information that was accidentally made accessible was first and last name, municipality, unique identifying number (but not OHIP number), testing date and location, and the test result.

It also included a telephone number.

Source: https://www.databreaches.net/ontario-north-bay-parry-sound-district-health-unit-announces-privacy-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/north-bay-parry-sound-district-health-unit

"id": "nor2137291222",
"linkid": "north-bay-parry-sound-district-health-unit",
"type": "Breach",
"date": "05/2020",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'North Bay, Parry Sound District, Ontario, '
                                    'Canada',
                        'name': 'North Bay Parry Sound District Health Unit',
                        'type': 'Health Unit'}],
 'attack_vector': 'Unintentional Data Exposure',
 'data_breach': {'personally_identifiable_information': ['first and last name',
                                                         'municipality',
                                                         'unique identifying '
                                                         'number',
                                                         'testing date and '
                                                         'location',
                                                         'test result',
                                                         'telephone number'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PII']},
 'description': 'The North Bay Parry Sound District Health Unit became a '
                'victim of a privacy breach in relation to its online COVID-19 '
                'dashboard. The dashboard contained information related to the '
                'number of COVID-19 tests and confirmed cases in the local '
                'community. Inadvertently, personally identifying information '
                'was made accessible through the dashboard. Information that '
                'was accidentally made accessible included first and last '
                'name, municipality, unique identifying number (but not OHIP '
                'number), testing date and location, and the test result. It '
                'also included a telephone number.',
 'impact': {'data_compromised': ['first and last name',
                                 'municipality',
                                 'unique identifying number',
                                 'testing date and location',
                                 'test result',
                                 'telephone number'],
            'systems_affected': ['online COVID-19 dashboard']},
 'title': 'North Bay Parry Sound District Health Unit Privacy Breach',
 'type': 'Privacy Breach'}