Sharon J. Jones, M.D.

The California Office of the Attorney General reported a data breach involving Sharon J. Jones, M.D. on May 19, 2015. The breach occurred on March 20, 2015, when an office break-in resulted in the theft of approximately 17 patient charts, one desktop computer, two laptops, and a server. The compromised information included patient names, addresses, dates of birth, and basic medical information but did not contain social security numbers or financial information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-55986

TPRM report: https://www.rankiteo.com/company/nuvancehealth

"id": "nuv745072525",
"linkid": "nuvancehealth",
"type": "Breach",
"date": "3/2015",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 17,
                        'industry': 'Healthcare',
                        'location': 'California',
                        'name': 'Sharon J. Jones, M.D.',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Physical Theft',
 'data_breach': {'number_of_records_exposed': 17,
                 'personally_identifiable_information': ['Patient names',
                                                         'Addresses',
                                                         'Dates of birth'],
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['Patient names',
                                              'Addresses',
                                              'Dates of birth',
                                              'Basic medical information']},
 'date_detected': '2015-03-20',
 'date_publicly_disclosed': '2015-05-19',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Sharon J. Jones, M.D. on May 19, 2015. The '
                'breach occurred on March 20, 2015, when an office break-in '
                'resulted in the theft of approximately 17 patient charts, one '
                'desktop computer, two laptops, and a server. The compromised '
                'information included patient names, addresses, dates of '
                'birth, and basic medical information but did not contain '
                'social security numbers or financial information.',
 'impact': {'data_compromised': ['Patient names',
                                 'Addresses',
                                 'Dates of birth',
                                 'Basic medical information'],
            'systems_affected': ['Desktop computer', 'Two laptops', 'Server']},
 'initial_access_broker': {'entry_point': 'Physical Theft'},
 'motivation': 'Unknown',
 'post_incident_analysis': {'root_causes': 'Physical Security Breach'},
 'references': [{'date_accessed': '2015-05-19',
                 'source': 'California Office of the Attorney General'}],
 'threat_actor': 'Unknown',
 'title': 'Data Breach at Sharon J. Jones, M.D.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Physical Security'}