Rutland Regional Medical Center discovered an incident that affect the security of the personal information of certain individuals after employee email accounts were hacked.
An employee’s email account was subject to unauthorized access and immediately changed the employee’s password and locked the account.
Rutland Regional enlisted the assistance of a third-party forensic expert to further investigate this incident.
The attack exposed the name, contact information, Social Security number, financial information, date of birth, medical record number, patient identification number, medical and/or clinical information including diagnosis and treatment information, and health insurance information of certain individuals.
Rutland Regional investigated the incident and notified the impacted individuals.
"id": "RUT42316223",
"linkid": "rutland-regional-medical-center",
"type": "Data Leak",
"date": "12/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"