Penobscot Community Health Care

Penobscot Community Health Center in Maine notified patients who were affected by the American Medical Collections Agency hack.

They stated that some unauthorized person have had access to AMCA’s systems.

Some of PCHC’s patients’ information was contained in the AMCA system, including names, dates of birth, name of referring medical provider, and other medical information related to services received at PCHC.

PCHC has since ceased doing business with AMCA and is taking steps to retrieve and secure all PCHC information contained in AMCA’s systems.

Source: https://www.databreaches.net/penobscot-community-health-center-notifying-13000-patients-about-collection-agency-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/penobscot-community-health-care

"id": "pen11727323",
"linkid": "penobscot-community-health-care",
"type": "Data Leak",
"date": "07/2019",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Maine',
                        'name': 'Penobscot Community Health Center',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Unauthorized Access',
 'customer_advisories': 'Notified affected patients',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Dates of Birth',
                                              'Name of Referring Medical '
                                              'Provider',
                                              'Other Medical Information']},
 'description': 'Penobscot Community Health Center (PCHC) in Maine notified '
                'patients who were affected by the American Medical '
                'Collections Agency (AMCA) hack. An unauthorized person gained '
                'access to AMCA’s systems, which contained some of PCHC’s '
                'patients’ information, including names, dates of birth, name '
                'of referring medical provider, and other medical information '
                'related to services received at PCHC. PCHC has since ceased '
                'doing business with AMCA and is taking steps to retrieve and '
                'secure all PCHC information contained in AMCA’s systems.',
 'impact': {'data_compromised': ['Names',
                                 'Dates of Birth',
                                 'Name of Referring Medical Provider',
                                 'Other Medical Information']},
 'post_incident_analysis': {'corrective_actions': ['Ceased doing business with '
                                                   'AMCA',
                                                   'Taking steps to retrieve '
                                                   'and secure all PCHC '
                                                   'information contained in '
                                                   'AMCA’s systems']},
 'references': [{'source': 'Penobscot Community Health Center'}],
 'response': {'communication_strategy': 'Notified affected patients',
              'remediation_measures': ['Ceased doing business with AMCA',
                                       'Taking steps to retrieve and secure '
                                       'all PCHC information contained in '
                                       'AMCA’s systems']},
 'threat_actor': 'Unknown',
 'title': 'Penobscot Community Health Center Data Breach',
 'type': 'Data Breach'}