Connexin Software, Inc.

The California Office of the Attorney General disclosed a data breach affecting Connexin Software, Inc. on November 14, 2022, stemming from an incident on July 17, 2022. Unauthorized actors gained access to an offline set of patient data, potentially exposing highly sensitive personal information. The compromised data included names, Social Security Numbers (SSNs), health insurance details, and medical records critical identifiers that heighten risks of identity theft, financial fraud, and medical fraud. The breach underscores vulnerabilities in securing offline or archived datasets, which are often perceived as lower-risk targets. Given the nature of the exposed data (SSNs and medical records), affected individuals face long-term repercussions, including fraudulent credit applications, unauthorized medical services, and targeted phishing attacks. The incident also raises concerns about compliance with healthcare data protection regulations (e.g., HIPAA), as the exposure of protected health information (PHI) could trigger regulatory penalties and erode patient trust. While the attack vector (e.g., insider threat, external hacking) was not specified, the unauthorized access to offline records suggests either physical security lapses or compromised backup systems. The breach’s delayed disclosure (nearly 4 months) may further amplify reputational damage and legal scrutiny.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-559176

TPRM report: https://www.rankiteo.com/company/officepracticum

"id": "off406082125",
"linkid": "officepracticum",
"type": "Breach",
"date": "7/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare Software',
                        'location': 'California, USA',
                        'name': 'Connexin Software, Inc.',
                        'type': 'Company'}],
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'Numbers (SSNs)'],
                 'sensitivity_of_data': 'high',
                 'type_of_data_compromised': ['personal information',
                                              'health information']},
 'date_detected': '2022-07-17',
 'date_publicly_disclosed': '2022-11-14',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Connexin Software, Inc. on November 14, '
                '2022. The breach, which occurred on July 17, 2022, involved '
                'unauthorized access to an offline set of patient data and may '
                'have compromised personal information, including names, '
                'Social Security Numbers (SSNs), health insurance information, '
                'and medical records.',
 'impact': {'data_compromised': ['names',
                                 'Social Security Numbers (SSNs)',
                                 'health insurance information',
                                 'medical records'],
            'identity_theft_risk': 'high',
            'systems_affected': ['offline patient data']},
 'references': [{'date_accessed': '2022-11-14',
                 'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['California data breach '
                                                    'notification laws'],
                           'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Connexin Software, Inc. Data Breach (2022)',
 'type': 'Data Breach'}