After comprehensive personal information about its 36 incapacitated residents was allegedly discovered in the street, a nursing home is now the subject of an investigation into a "very serious" violation of data protection laws.
The number of persons affected and the extremely sensitive nature of the personal information involved make this a very severe data breach.
A personal data breach must be reported to the ICO within 72 hours of becoming aware of it, unless it is unlikely to put people's rights and freedoms in danger.
TPRM report: https://scoringcyber.rankiteo.com/company/nursing-homes-ireland
"id": "nur2324423",
"linkid": "nursing-homes-ireland",
"type": "Data Leak",
"date": "03/2020",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': ['36 incapacitated residents'],
'industry': 'Healthcare',
'type': 'Nursing Home'}],
'data_breach': {'number_of_records_exposed': '36',
'personally_identifiable_information': True,
'sensitivity_of_data': ['High'],
'type_of_data_compromised': ['Personal Information']},
'description': "A nursing home is under investigation for a 'very serious' "
'violation of data protection laws after comprehensive '
'personal information about its 36 incapacitated residents was '
'allegedly discovered in the street.',
'impact': {'data_compromised': ['Personal Information']},
'investigation_status': 'Under Investigation',
'regulatory_compliance': {'regulations_violated': ['Data Protection Laws'],
'regulatory_notifications': ['ICO notification '
'required within 72 '
'hours']},
'title': 'Data Breach at Nursing Home',
'type': 'Data Breach'}