Rhode Island Department of Health

Rhode Island Department of Health (RIDOH) suffered a data breach incident that occurred between July and October 2022 that affected around 8,800.

A hyperlink to a spreadsheet file containing information about individuals receiving food deliveries while in isolation or quarantine during the COVID-19 pandemic was accidentally included in certain emails sent by RIDOH employees.

The emails contained files containing names, addresses, phone numbers, the individual’s specific food needs, household information, and delivery information.

RIDOH immediately launched the investigation as soon as they learned about the incident.

Source: https://healthitsecurity.com/news/ma-medical-device-company-reports-healthcare-data-breach-29k-impacted

TPRM report: https://scoringcyber.rankiteo.com/company/rhode-island-department-of-health

"id": "rho164322123",
"linkid": "rhode-island-department-of-health",
"type": "Data Leak",
"date": "10/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 8800,
                        'industry': 'Healthcare',
                        'location': 'Rhode Island',
                        'name': 'Rhode Island Department of Health',
                        'type': 'Government Agency'}],
 'attack_vector': 'Email',
 'data_breach': {'file_types_exposed': ['Spreadsheet'],
                 'number_of_records_exposed': 8800,
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'phone numbers',
                                                         'specific food needs',
                                                         'household '
                                                         'information',
                                                         'delivery '
                                                         'information'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': 'Rhode Island Department of Health (RIDOH) suffered a data '
                'breach incident that occurred between July and October 2022 '
                'that affected around 8,800 individuals. A hyperlink to a '
                'spreadsheet file containing information about individuals '
                'receiving food deliveries while in isolation or quarantine '
                'during the COVID-19 pandemic was accidentally included in '
                'certain emails sent by RIDOH employees. The emails contained '
                'files containing names, addresses, phone numbers, the '
                'individual’s specific food needs, household information, and '
                'delivery information.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'phone numbers',
                                 'specific food needs',
                                 'household information',
                                 'delivery information']},
 'initial_access_broker': {'entry_point': 'Email'},
 'investigation_status': 'Ongoing',
 'post_incident_analysis': {'root_causes': 'Human Error'},
 'title': 'Rhode Island Department of Health Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}