Massachusetts-based Pediatrics West notified more than 1,300 individuals of a healthcare data breach that it discovered in October.
The practice discovered suspicious activity on its systems and launched an investigation and determined that an unauthorized party had accessed some of its systems between August 19, 2021, and August 15, 2022.
The incident compromised some information for some of its patients, including names, contact information, demographic information, dates of birth, diagnosis and treatment information, prescription information, medical record number, provider names, dates of service, and/or health insurance information.
Source: https://healthitsecurity.com/news/multicare-notifies-23k-of-third-party-breach
TPRM report: https://scoringcyber.rankiteo.com/company/pediatrics-west
"id": "ped124251222",
"linkid": "pediatrics-west",
"type": "Breach",
"date": "10/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 1300,
'industry': 'Healthcare',
'location': 'Massachusetts',
'name': 'Pediatrics West',
'type': 'Healthcare Practice'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'number_of_records_exposed': 1300,
'personally_identifiable_information': ['names',
'contact information',
'demographic '
'information',
'dates of birth',
'medical record '
'number',
'provider names',
'health insurance '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'contact information',
'demographic information',
'dates of birth',
'diagnosis and treatment '
'information',
'prescription information',
'medical record number',
'provider names',
'dates of service',
'health insurance information']},
'date_detected': 'October 2022',
'description': 'Massachusetts-based Pediatrics West notified more than 1,300 '
'individuals of a healthcare data breach that it discovered in '
'October. The practice discovered suspicious activity on its '
'systems and launched an investigation and determined that an '
'unauthorized party had accessed some of its systems between '
'August 19, 2021, and August 15, 2022. The incident '
'compromised some information for some of its patients, '
'including names, contact information, demographic '
'information, dates of birth, diagnosis and treatment '
'information, prescription information, medical record number, '
'provider names, dates of service, and/or health insurance '
'information.',
'impact': {'data_compromised': ['names',
'contact information',
'demographic information',
'dates of birth',
'diagnosis and treatment information',
'prescription information',
'medical record number',
'provider names',
'dates of service',
'health insurance information']},
'threat_actor': 'Unauthorized Party',
'title': 'Pediatrics West Data Breach',
'type': 'Data Breach'}