Connexin Software, Inc.

The Vermont Office of the Attorney General disclosed a data breach affecting Connexin Software, Inc. on November 28, 2022, stemming from an incident on August 26, 2022. Unauthorized actors gained access to an offline set of patient data, compromising sensitive information such as demographic details, Social Security Numbers (SSNs), health insurance records, medical data, and billing information. The exact number of impacted individuals remains undetermined, but the exposure of SSNs and medical data poses severe risks, including identity theft, financial fraud, and potential misuse of health-related information. The breach highlights vulnerabilities in securing offline data repositories, raising concerns over the company’s data protection measures and the long-term consequences for affected patients, who may face prolonged monitoring for fraudulent activity or unauthorized use of their personal and health records.

Source: https://ago.vermont.gov/document/2022-11-28-connexin-software-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/officepracticum

"id": "off221090725",
"linkid": "officepracticum",
"type": "Breach",
"date": "8/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Healthcare Software',
                        'name': 'Connexin Software, Inc.',
                        'type': 'Company'}],
 'data_breach': {'data_exfiltration': 'Unclear (offline data accessed)',
                 'personally_identifiable_information': 'Yes (SSNs, '
                                                        'demographic info)',
                 'sensitivity_of_data': 'High (includes SSNs and medical data)',
                 'type_of_data_compromised': ['demographic information',
                                              'Social Security Numbers (SSNs)',
                                              'health insurance information',
                                              'medical information',
                                              'billing information']},
 'date_detected': '2022-08-26',
 'date_publicly_disclosed': '2022-11-28',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Connexin Software, Inc. on November 28, '
                '2022. The breach, which occurred on August 26, 2022, involved '
                'unauthorized access to an offline set of patient data, '
                'potentially affecting demographic information, Social '
                'Security Numbers (SSNs), health insurance information, '
                'medical information, and billing information, though it is '
                'unclear how many individuals were affected.',
 'impact': {'data_compromised': ['demographic information',
                                 'Social Security Numbers (SSNs)',
                                 'health insurance information',
                                 'medical information',
                                 'billing information'],
            'identity_theft_risk': 'Potential (SSNs compromised)'},
 'references': [{'date_accessed': '2022-11-28',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Vermont Office '
                                        'of the Attorney General'},
 'title': 'Data Breach at Connexin Software, Inc.',
 'type': 'Data Breach'}