Select Health Network

Select Health Network, a healthcare service provider suffered a data security incident that impacted the privacy of personal information for current or former members of its plans.

Investigation revealed that Select Health's employee email account was accessed by an unknown actor from May 22, 2019, to June 13, 2019.

The compromised email account exposed personal information like Name, Address, Date of Birth, Member ID Number, Treating/Referring Physician, Health Insurance Information, Medical History Information, Treatment Information, Treatment Cost Information, Health Insurance Policy Number, and Medical Record Number. For a limited number of individuals, Social Security number.

Select Health notified potentially affected individuals by posting a notification on its website, and by mailing letters to potentially affected individuals.

Source: https://www.prnewswire.com/news-releases/select-heath-network-provides-notice-of-data-security-incident-300957936.html

TPRM report: https://scoringcyber.rankiteo.com/company/selecthealthnetwork

"id": "sel1436722",
"linkid": "selecthealthnetwork",
"type": "Data Leak",
"date": "11/2019",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'Select Health Network',
                        'type': 'Healthcare Service Provider'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'personally_identifiable_information': ['Social Security '
                                                         'Number'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Health Information']},
 'description': 'Select Health Network, a healthcare service provider, '
                'suffered a data security incident that impacted the privacy '
                'of personal information for current or former members of its '
                "plans. Investigation revealed that Select Health's employee "
                'email account was accessed by an unknown actor from May 22, '
                '2019, to June 13, 2019. The compromised email account exposed '
                'personal information like Name, Address, Date of Birth, '
                'Member ID Number, Treating/Referring Physician, Health '
                'Insurance Information, Medical History Information, Treatment '
                'Information, Treatment Cost Information, Health Insurance '
                'Policy Number, and Medical Record Number. For a limited '
                'number of individuals, Social Security number.',
 'impact': {'data_compromised': ['Name',
                                 'Address',
                                 'Date of Birth',
                                 'Member ID Number',
                                 'Treating/Referring Physician',
                                 'Health Insurance Information',
                                 'Medical History Information',
                                 'Treatment Information',
                                 'Treatment Cost Information',
                                 'Health Insurance Policy Number',
                                 'Medical Record Number',
                                 'Social Security Number']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'response': {'communication_strategy': ['Posting a notification on its '
                                         'website',
                                         'Mailing letters to potentially '
                                         'affected individuals']},
 'threat_actor': 'Unknown Actor',
 'title': 'Data Security Incident at Select Health Network',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Compromised Email Account'}