Questcare Medical Clinic

Questcare Medical Services suffered a security incident that involved the personal information of patients in the Dallas/Fort Worth/Arlington area.

Questcare immediately began an internal investigation, notified individuals who were affected and implemented additional security measures to prevent future occurrences.

Questcare determined an unauthorized third party obtained access to an employee’s email account.

Source: https://www.databreaches.net/questcare-medical-services-notifies-north-texas-patients-of-data-security-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/questcaremedicalclinic

"id": "que233413123",
"linkid": "questcaremedicalclinic",
"type": "Data Leak",
"date": "04/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Patients',
                        'industry': 'Healthcare',
                        'location': ['Dallas', 'Fort Worth', 'Arlington'],
                        'name': 'Questcare Medical Services',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'Questcare Medical Services suffered a security incident that '
                'involved the personal information of patients in the '
                'Dallas/Fort Worth/Arlington area. Questcare immediately began '
                'an internal investigation, notified individuals who were '
                'affected and implemented additional security measures to '
                'prevent future occurrences. Questcare determined an '
                'unauthorized third party obtained access to an employee’s '
                'email account.',
 'impact': {'data_compromised': ['Personal Information'],
            'systems_affected': ['Email System']},
 'initial_access_broker': {'entry_point': "Employee's email account"},
 'investigation_status': 'Investigation completed',
 'post_incident_analysis': {'corrective_actions': 'Implemented additional '
                                                  'security measures',
                            'root_causes': 'Unauthorized access to an '
                                           'employee’s email account'},
 'response': {'communication_strategy': ['Notified affected individuals'],
              'incident_response_plan_activated': True,
              'remediation_measures': ['Implemented additional security '
                                       'measures']},
 'threat_actor': 'Unauthorized third party',
 'title': 'Questcare Medical Services Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized access to an employee’s email '
                            'account'}