South Georgia Medical Center

SGMC security software was put out an alert after a former employee had accessed and unauthorized downloaded the data.

The data involved as names, dates of birth and test results,and not financial data, Social Security numbers or medical records of the patients.

The hospital sent mail letters to affected patients and offered free credit monitoring and identity restoration or monitoring services to them and charged the employee with felony computer theft after the investigation.

Source: https://sports.yahoo.com/ex-hospital-worker-arrested-sgmc-001600795.html

TPRM report: https://www.rankiteo.com/company/south-georgia-medical-center

"id": "sou05624422",
"linkid": "south-georgia-medical-center",
"type": "Breach",
"date": "6/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'SGMC',
                        'type': 'Hospital'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': ['names',
                                              'dates of birth',
                                              'test results']},
 'description': 'SGMC security software alerted after a former employee had '
                'accessed and unauthorized downloaded the data. The data '
                'involved names, dates of birth, and test results, but not '
                'financial data, Social Security numbers, or medical records '
                'of the patients. The hospital sent mail letters to affected '
                'patients and offered free credit monitoring and identity '
                'restoration or monitoring services to them and charged the '
                'employee with felony computer theft after the investigation.',
 'impact': {'data_compromised': ['names', 'dates of birth', 'test results'],
            'legal_liabilities': 'Felony computer theft'},
 'regulatory_compliance': {'legal_actions': 'Felony computer theft'},
 'response': {'communication_strategy': 'Mail letters to affected patients, '
                                        'offered free credit monitoring and '
                                        'identity restoration or monitoring '
                                        'services',
              'law_enforcement_notified': True},
 'threat_actor': 'Former Employee',
 'title': 'Unauthorized Data Access by Former Employee',
 'type': 'Data Breach'}