Roper St. Francis Healthcare

Roper St. Francis Healthcare learned that an unauthorized actor have gained access to some employees’ email accounts.

They immediately took steps to secure the email account and began an investigation, which included hiring a leading third-party forensic firm.

The investigation determined that some patient information have been contained in the email accounts, patients’ names, medical record numbers, information about services they received from Roper St. Francis, health insurance information, and, in some cases, Social Security numbers and financial information.

There was no indication that any patient information has been misused.

As a precaution, for those patients whose Social Security number was affected, the company offered complimentary credit monitoring and identity protection services.

Source: https://www.databreaches.net/sc-roper-st-francis-notifying-patients-after-employees-fall-for-phishing-attack/

"id": "ROP203821223",
"linkid": "roperstfrancishealthcare",
"type": "Data Leak",
"date": "02/2019",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"