The RCMP inadvertently sent an account of someone's suicide attempt to the wrong email chain, leaving the details in the inboxes of more than 160 people.
The email included the person's name and date of birth, details of the suicide attempt, the injuries they sustained and the name of the hospital where they were recovering.
The case started last winter when officers responded to an emergency call and collected the personal information of the victim.
Instead of sharing that information only with select members of the RCMP's senior management team, the sender forwarded it to the wrong proxy email address, which was linked to 130 Mounties' accounts.
Source: https://www.cbc.ca/news/politics/rcmp-privacy-breach-suicide-1.5203645
TPRM report: https://scoringcyber.rankiteo.com/company/rcmp-foundation
"id": "rcm16561423",
"linkid": "rcmp-foundation",
"type": "Data Leak",
"date": "07/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Law Enforcement',
'location': 'Canada',
'name': 'RCMP',
'type': 'Government Agency'}],
'attack_vector': 'Email',
'data_breach': {'number_of_records_exposed': 160,
'personally_identifiable_information': ['Name',
'Date of Birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Health Information']},
'description': "The RCMP inadvertently sent an account of someone's suicide "
'attempt to the wrong email chain, leaving the details in the '
'inboxes of more than 160 people. The email included the '
"person's name and date of birth, details of the suicide "
'attempt, the injuries they sustained and the name of the '
'hospital where they were recovering. The case started last '
'winter when officers responded to an emergency call and '
'collected the personal information of the victim. Instead of '
'sharing that information only with select members of the '
"RCMP's senior management team, the sender forwarded it to the "
"wrong proxy email address, which was linked to 130 Mounties' "
'accounts.',
'impact': {'data_compromised': ["Person's name",
'Date of birth',
'Details of the suicide attempt',
'Injuries sustained',
'Name of the hospital']},
'post_incident_analysis': {'root_causes': 'Human Error'},
'title': 'RCMP Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Human Error'}