Saltzer Health, an Intermountain Healthcare company

Some of the protected health information of Idaho-based Saltzer Health was compromised in an email breach.

An unauthorized individual had access to an employee's email account and compromised information including names, contact information, driver's license numbers, medical information, and, for some patients, Social Security numbers or financial information.

Saltzer Health notified the incident to higher authorities and notified the impacted individuals of the breach.

Source: https://www.beckershospitalreview.com/cybersecurity/intermountain-physician-group-email-breach-exposes-patient-protected-health-information.html?utm_campaign=bhr&utm_source=website&utm_content=related

TPRM report: https://scoringcyber.rankiteo.com/company/saltzerhealth

"id": "sal222617522",
"linkid": "saltzerhealth",
"type": "Breach",
"date": "06/2021",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'Idaho',
                        'name': 'Saltzer Health',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Email Compromise',
 'customer_advisories': True,
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Contact Information',
                                              "Driver's License Numbers",
                                              'Medical Information',
                                              'Social Security Numbers',
                                              'Financial Information']},
 'description': "An unauthorized individual had access to an employee's email "
                'account and compromised information including names, contact '
                "information, driver's license numbers, medical information, "
                'and, for some patients, Social Security numbers or financial '
                'information.',
 'impact': {'data_compromised': ['Names',
                                 'Contact Information',
                                 "Driver's License Numbers",
                                 'Medical Information',
                                 'Social Security Numbers',
                                 'Financial Information']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'regulatory_compliance': {'regulatory_notifications': True},
 'response': {'communication_strategy': True, 'law_enforcement_notified': True},
 'threat_actor': 'Unauthorized Individual',
 'title': 'Email Breach at Saltzer Health',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access to Email Account'}