Oklahoma City Indian Clinic suffered a data breach that exposed personally identifiable information (PII) of some individuals.
An unauthorized party accessed and retained sensitive customer information from its systems of 38,239 individuals.
The compromised files included names, dates of birth, treatment information, prescription information, medical records, physician information, health insurance policy numbers, phone numbers, Tribal ID numbers, Social Security numbers, and driver’s license numbers of customers.
OKCIC investigated the incident with the help of a third-party forensic firm and notified the affected individuals.
Source: https://www.infosecurity-magazine.com/news/oklahoma-city-indian-clinic-data/
TPRM report: https://scoringcyber.rankiteo.com/company/oklahoma-city-indian-clinic
"id": "okl328622",
"linkid": "oklahoma-city-indian-clinic",
"type": "Breach",
"date": "05/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 38239,
'industry': 'Healthcare',
'location': 'Oklahoma City',
'name': 'Oklahoma City Indian Clinic',
'type': 'Healthcare'}],
'customer_advisories': 'Affected individuals were notified',
'data_breach': {'number_of_records_exposed': 38239,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'description': 'Oklahoma City Indian Clinic suffered a data breach that '
'exposed personally identifiable information (PII) of some '
'individuals. An unauthorized party accessed and retained '
'sensitive customer information from its systems of 38,239 '
'individuals. The compromised files included names, dates of '
'birth, treatment information, prescription information, '
'medical records, physician information, health insurance '
'policy numbers, phone numbers, Tribal ID numbers, Social '
'Security numbers, and driver’s license numbers of customers. '
'OKCIC investigated the incident with the help of a '
'third-party forensic firm and notified the affected '
'individuals.',
'impact': {'data_compromised': ['names',
'dates of birth',
'treatment information',
'prescription information',
'medical records',
'physician information',
'health insurance policy numbers',
'phone numbers',
'Tribal ID numbers',
'Social Security numbers',
'driver’s license numbers']},
'investigation_status': 'Investigated with third-party forensic firm',
'response': {'communication_strategy': 'Affected individuals were notified',
'third_party_assistance': 'third-party forensic firm'},
'title': 'Data Breach at Oklahoma City Indian Clinic',
'type': 'Data Breach'}