Prominence Health Plan

The Maine Office of the Attorney General reported a data breach involving Prominence Health Plan on June 18, 2021. The breach occurred on November 30, 2020, following unauthorized access to data, impacting approximately 45,000 individuals and consisting of audio recordings and electronic images containing personal health information. Identity theft protection services were offered, including 12 months of monitoring through Experian.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ebde4fe9-c475-4075-862b-622c3913c3cc.shtml

TPRM report: https://www.rankiteo.com/company/prominence-health-plan

"id": "pro522072625",
"linkid": "prominence-health-plan",
"type": "Breach",
"date": "11/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 45000,
                        'industry': 'Healthcare',
                        'name': 'Prominence Health Plan',
                        'type': 'Healthcare'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'file_types_exposed': ['Audio files', 'Image files'],
                 'number_of_records_exposed': 45000,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Audio recordings',
                                              'Electronic images containing '
                                              'personal health information']},
 'date_detected': '2020-11-30',
 'date_publicly_disclosed': '2021-06-18',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Prominence Health Plan on June 18, 2021. The '
                'breach occurred on November 30, 2020, following unauthorized '
                'access to data, impacting approximately 45,000 individuals '
                'and consisting of audio recordings and electronic images '
                'containing personal health information. Identity theft '
                'protection services were offered, including 12 months of '
                'monitoring through Experian.',
 'impact': {'data_compromised': ['Audio recordings',
                                 'Electronic images containing personal health '
                                 'information'],
            'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2021-06-18',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': ['Experian']},
 'title': 'Prominence Health Plan Data Breach',
 'type': 'Data Breach'}