Rutland Regional Medical Center

Rutland Regional Medical Center (“Rutland Regional”) suffered a data security incident after employee email accounts were hacked.

The breach exposed name, contact information, Social Security number, financial information, date of birth, medical record number, patient identification number, medical and/or clinical information including diagnosis and treatment information, and health insurance information of certain individuals.

Rutland Regional investigated the incident and notified the impacted individuals.

Source: https://www.databreaches.net/vt-rutland-regional-medical-center-notifies-patients-after-employee-email-accounts-hacked/

TPRM report: https://scoringcyber.rankiteo.com/company/rutland-regional-medical-center

"id": "rut1914822",
"linkid": "rutland-regional-medical-center",
"type": "Breach",
"date": "02/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Rutland Regional Medical Center',
                        'type': 'Healthcare'}],
 'attack_vector': 'Email Account Hacking',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Name',
                                              'Contact Information',
                                              'Social Security Number',
                                              'Financial Information',
                                              'Date of Birth',
                                              'Medical Record Number',
                                              'Patient Identification Number',
                                              'Medical and/or Clinical '
                                              'Information',
                                              'Diagnosis and Treatment '
                                              'Information',
                                              'Health Insurance Information']},
 'description': 'Rutland Regional Medical Center suffered a data security '
                'incident after employee email accounts were hacked.',
 'impact': {'data_compromised': ['Name',
                                 'Contact Information',
                                 'Social Security Number',
                                 'Financial Information',
                                 'Date of Birth',
                                 'Medical Record Number',
                                 'Patient Identification Number',
                                 'Medical and/or Clinical Information',
                                 'Diagnosis and Treatment Information',
                                 'Health Insurance Information']},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'response': {'communication_strategy': 'Notified impacted individuals'},
 'title': 'Rutland Regional Medical Center Data Security Incident',
 'type': 'Data Breach'}