An unauthorized party gained access to an employee’s email account of OrthoNebraska Hospital, based in Omaha, and breached certain sensitive patient information.
The leaked information included patients’ first and last names, genders, home addresses, phone numbers, dates of birth, driver’s license numbers, state identification card numbers, usernames and passwords, Social Security numbers, medical history/diagnosis/treatment, dates of service, lab test results, prescription information, provider names, medical account numbers, and insurance information.
The investigation revealed that the spam messages were sent from the company's email address, which lead to the data security breach.
Source: https://www.jdsupra.com/legalnews/orthonebraska-hospital-reports-leaked-2426111/
"id": "ORT14812722",
"linkid": "ortho-nebraska",
"type": "Breach",
"date": "12/2021",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"