New Hampshire-based Optima Dermatology suffered an email security incident that potentially exposed protected health information 59,872 individuals.
An unauthorized actor gained access to an employee email account containing names, birth dates, health insurance claims information, subscriber numbers, medical record numbers, and medical treatment and conditions information.
Optima Dermatology notified individuals whose information was included in the files present in the impacted employee email account.
Source: https://healthitsecurity.com/news/illinois-gastroenterology-group-data-breach-impacts-228k
TPRM report: https://scoringcyber.rankiteo.com/company/optimadermatology
"id": "opt4011622",
"linkid": "optimadermatology",
"type": "Breach",
"date": "02/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 59872,
'industry': 'Healthcare',
'location': 'New Hampshire',
'name': 'Optima Dermatology',
'type': 'Healthcare Provider'}],
'attack_vector': 'Email Compromise',
'data_breach': {'number_of_records_exposed': 59872,
'personally_identifiable_information': ['names',
'birth dates'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'birth dates',
'health insurance claims '
'information',
'subscriber numbers',
'medical record numbers',
'medical treatment and '
'conditions information']},
'description': 'An unauthorized actor gained access to an employee email '
'account containing names, birth dates, health insurance '
'claims information, subscriber numbers, medical record '
'numbers, and medical treatment and conditions information.',
'impact': {'data_compromised': ['names',
'birth dates',
'health insurance claims information',
'subscriber numbers',
'medical record numbers',
'medical treatment and conditions '
'information']},
'initial_access_broker': {'entry_point': 'Employee Email Account'},
'response': {'communication_strategy': 'Optima Dermatology notified '
'individuals whose information was '
'included in the files present in the '
'impacted employee email account.'},
'title': 'Email Security Incident at Optima Dermatology',
'type': 'Data Breach'}