Nuvance Health, which operates the Western Connecticut Health Network, suffered from a data breach incident that exposed some of their medical records.
Upon learning of the incident, WCHN immediately launched an investigation and worked with the USPS to retrieve the damaged box.
WCHN determined that the box contained reports for some WCHN patients, which included patient names, addresses, dates of birth, medical record numbers, provider names, medical record numbers, dates of diagnosis, diagnoses, and diagnostic test information.
The organization mailed notification letters to potentially affected patients on August 19, 2019, and established a dedicated incident response line to answer any questions.
Source: https://patch.com/connecticut/danbury/wchn-danbury-warns-possible-medical-records-breach
TPRM report: https://scoringcyber.rankiteo.com/company/nuvancehealth
"id": "nuv02110423",
"linkid": "nuvancehealth",
"type": "Data Leak",
"date": "08/2019",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Western Connecticut',
'name': 'Nuvance Health',
'type': 'Healthcare'}],
'customer_advisories': 'Dedicated incident response line established',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['patient names',
'addresses',
'dates of birth',
'medical record numbers',
'provider names',
'dates of diagnosis',
'diagnoses',
'diagnostic test information']},
'date_publicly_disclosed': '2019-08-19',
'description': 'Nuvance Health, which operates the Western Connecticut Health '
'Network, suffered from a data breach incident that exposed '
'some of their medical records.',
'impact': {'data_compromised': ['patient names',
'addresses',
'dates of birth',
'medical record numbers',
'provider names',
'dates of diagnosis',
'diagnoses',
'diagnostic test information']},
'investigation_status': 'Completed',
'references': [{'source': 'Nuvance Health'}],
'response': {'communication_strategy': 'Notification letters mailed to '
'potentially affected patients',
'incident_response_plan_activated': 'Yes'},
'title': 'Nuvance Health Data Breach',
'type': 'Data Breach'}