The U.S. Department of Health and Human Services reported on December 15, 2017, that NYU School of Medicine - Pediatric Surgery Associates experienced a data breach involving the improper disposal of a binder containing protected health information (PHI) of 2,158 patients. The compromised PHI included names, birthdates, health insurance information, and clinical information.
Source: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
TPRM report: https://scoringcyber.rankiteo.com/company/nyulangonehealth
"id": "nyu505071125",
"linkid": "nyulangonehealth",
"type": "Breach",
"date": "12/2017",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': 2158,
'industry': 'Healthcare',
'location': 'New York, USA',
'name': 'NYU School of Medicine - Pediatric Surgery '
'Associates',
'type': 'Healthcare Provider'}],
'attack_vector': 'Improper Disposal',
'data_breach': {'number_of_records_exposed': 2158,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'birthdates',
'health insurance information',
'clinical information']},
'date_detected': '2017-12-15',
'date_publicly_disclosed': '2017-12-15',
'description': 'Improper disposal of a binder containing protected health '
'information (PHI) of 2,158 patients.',
'impact': {'data_compromised': ['names',
'birthdates',
'health insurance information',
'clinical information']},
'references': [{'date_accessed': '2017-12-15',
'source': 'U.S. Department of Health and Human Services'}],
'title': 'NYU School of Medicine - Pediatric Surgery Associates Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Improper Disposal'}