"RTÉ suffered from a data breach incident after that the company's email account had been hacked.
The company said that the hacker had used the company's email account to write to customers asking them to share sensitive personal information in return.
The company told patients that they were treating the issue very seriously - and that they have notified the Data Protection Commission about the breach.
The data compromised includes information such as a history of alcohol use; medical information provided by GPs; and also medical test information, such as blood tests, liver scans, and so forth.
Source: https://www.rte.ie/news/ireland/2019/1117/1092448-liver-patients-exposed-in-data-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/rte
"id": "rte54226423",
"linkid": "rte",
"type": "Data Leak",
"date": "10/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Media and Broadcasting',
'name': 'RTÉ',
'type': 'Company'}],
'attack_vector': 'Email Account Hacking',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': ['history of alcohol use',
'medical information provided by '
'GPs',
'medical test information']},
'description': "RTÉ suffered from a data breach incident after the company's "
"email account had been hacked. The hacker used the company's "
'email account to write to customers asking them to share '
'sensitive personal information in return. The company '
'notified the Data Protection Commission about the breach. The '
'data compromised includes information such as a history of '
'alcohol use, medical information provided by GPs, and medical '
'test information such as blood tests and liver scans.',
'impact': {'data_compromised': ['history of alcohol use',
'medical information provided by GPs',
'medical test information']},
'initial_access_broker': {'entry_point': 'Email Account'},
'motivation': 'Data Theft',
'regulatory_compliance': {'regulatory_notifications': 'Data Protection '
'Commission'},
'response': {'communication_strategy': 'Informed customers and notified the '
'Data Protection Commission'},
'title': 'RTÉ Data Breach Incident',
'type': 'Data Breach'}