27,367 people were affected by the theft of sensitive data after the ransomware-type cyber attack at the San Diego American Indian Health Center.
It included patients and healthcare / administrative staff,
The disturbing details emerge about the safety and good management of the data that people put in the hands of hospital entities.
This problem does not concern only the SDAIHC but dozens of other US hospital entities.
The shutdown of some servers caused a significant slowdown in patient care.
It was “only” a data theft and the partial blocking of the hospital’s computer systems, normal activity was fully restored a few weeks after the cyber attack.
Stolen data included Social Security numbers, driver’s license or state identification card numbers,
tribal identification card numbers, medical information, health insurance information and /or dates of birth.
The name of the ransomware group responsible is unknown.
The cyber attack was reported to the Federal Bureau of Investigation and the U.S. Department of Health and Human Services.
TPRM report: https://www.rankiteo.com/company/san-diego-american-indian-health-center
"id": "san045271022",
"linkid": "san-diego-american-indian-health-center",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "7",
"explanation": "Attack that could injure or kill people"
{'affected_entities': [{'customers_affected': 27367,
'industry': 'Healthcare',
'location': 'San Diego',
'name': 'San Diego American Indian Health Center',
'type': 'Healthcare'}],
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 27367,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
"Driver's license or state "
'identification card numbers',
'Tribal identification card '
'numbers',
'Medical information',
'Health insurance information',
'Dates of birth']},
'description': 'A ransomware attack at San Diego American Indian Health '
'Center resulted in the theft of sensitive data affecting '
'27,367 individuals, including patients and '
'healthcare/administrative staff. The incident caused a '
'significant slowdown in patient care due to server shutdowns. '
'Normal activity was restored a few weeks after the attack.',
'impact': {'data_compromised': ['Social Security numbers',
"Driver's license or state identification "
'card numbers',
'Tribal identification card numbers',
'Medical information',
'Health insurance information',
'Dates of birth'],
'downtime': 'Significant slowdown in patient care',
'systems_affected': ['Servers']},
'ransomware': {'data_exfiltration': True},
'regulatory_compliance': {'regulatory_notifications': ['Federal Bureau of '
'Investigation',
'U.S. Department of '
'Health and Human '
'Services']},
'response': {'law_enforcement_notified': True},
'title': 'San Diego American Indian Health Center Ransomware Attack',
'type': 'Ransomware Attack'}