ProPath Services, LLC in Texas suffered a data security breach stemming from the compromise of two employees’ email accounts.
The accessed email accounts contained the personal and protected health information of certain individuals who had laboratory or pathology testing services performed by ProPath, including their names, dates of birth, test orders, diagnosis and/or clinical treatment information, medical procedure information, physician name, and, in a limited number of cases, Social Security numbers, financial account information, driver’s license numbers, health insurance information, and passport numbers.
ProPath took measures to improve its technical safeguards and minimized the risk of a similar incident in the future, including implementing additional technical safeguards on its email system.
Source: https://www.databreaches.net/tx-propath-notifies-patients-of-data-security-incident/
TPRM report: https://scoringcyber.rankiteo.com/company/propath-pathology-services
"id": "pro163317123",
"linkid": "propath-pathology-services",
"type": "Breach",
"date": "03/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Texas',
'name': 'ProPath Services, LLC',
'type': 'Company'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Protected Health Information',
'Financial Information']},
'description': 'ProPath Services, LLC in Texas suffered a data security '
'breach stemming from the compromise of two employees’ email '
'accounts.',
'impact': {'data_compromised': ['names',
'dates of birth',
'test orders',
'diagnosis and/or clinical treatment '
'information',
'medical procedure information',
'physician name',
'Social Security numbers',
'financial account information',
'driver’s license numbers',
'health insurance information',
'passport numbers'],
'systems_affected': ['Email Accounts']},
'response': {'remediation_measures': ['Implementing additional technical '
'safeguards on its email system']},
'title': 'ProPath Services Data Security Breach',
'type': 'Data Breach'}