Rush University Medical Center

Rush University Hospital notified that they have been hit by a data breach that affected 908 patients, was coded as an Unauthorized Access/Disclosure incident with data located in paper/film format.

The personal information of about 45,000 Rush patients information compromised in a data breach, the health system revealed in a recent financial filing.

The compromised information includes names, addresses, birthdays, Social Security numbers and health insurance information, according to the filing.

The data did not include medical information, rush said that to its knowledge, none of the information had been misused.

Source: https://www.databreaches.net/rush-university-notifies-45000-patients-after-discovering-insider-wrongdoing-at-claims-processing-vendor/

TPRM report: https://scoringcyber.rankiteo.com/company/rush-university-medical-center

"id": "rus31612323",
"linkid": "rush-university-medical-center",
"type": "Data Leak",
"date": "01/2019",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': [908, 45000],
                        'industry': 'Healthcare',
                        'name': 'Rush University Hospital',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Unauthorized Access/Disclosure',
 'data_breach': {'file_types_exposed': ['Paper/film format'],
                 'number_of_records_exposed': [908, 45000],
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Addresses',
                                              'Birthdays',
                                              'Social Security numbers',
                                              'Health insurance information']},
 'description': 'Rush University Hospital reported a data breach affecting 908 '
                'and 45,000 patients, involving unauthorized access to '
                'personal information.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Birthdays',
                                 'Social Security numbers',
                                 'Health insurance information']},
 'references': [{'source': 'Rush University Hospital'}],
 'title': 'Rush University Hospital Data Breach',
 'type': 'Data Breach'}