The sensitive medical information of thousands of patients was improperly accessed by an employee of Orlando Health.
The accessed information included the names, addresses, medications, test results, and parts of Social Security numbers of 3,200 patients.
Orlando Health immediately took action and fired the employee and re-educated the staff about the rules for accessing patient records.
Source: https://www.wftv.com/news/local/hospital-employee-fired-after-improperly-accessing_nmrpd/32018436/
TPRM report: https://www.rankiteo.com/company/orlando-health
"id": "orl202525422",
"linkid": "orlando-health",
"type": "Breach",
"date": "6/2017",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 3200,
'industry': 'Healthcare',
'location': 'Orlando, Florida',
'name': 'Orlando Health',
'type': 'Healthcare Provider'}],
'attack_vector': 'Insider Threat',
'data_breach': {'number_of_records_exposed': 3200,
'personally_identifiable_information': ['Names',
'Addresses',
'Parts of Social '
'Security Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Medical Information']},
'description': 'The sensitive medical information of thousands of patients '
'was improperly accessed by an employee of Orlando Health. The '
'accessed information included the names, addresses, '
'medications, test results, and parts of Social Security '
'numbers of 3,200 patients. Orlando Health immediately took '
'action and fired the employee and re-educated the staff about '
'the rules for accessing patient records.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Medications',
'Test Results',
'Parts of Social Security Numbers']},
'response': {'containment_measures': ['Fired the employee',
'Re-educated staff about access rules']},
'threat_actor': 'Employee',
'title': 'Unauthorized Access to Patient Information at Orlando Health',
'type': 'Data Breach',
'vulnerability_exploited': 'Improper Access Controls'}