Southwest Washington Regional Surgery Center, LLC

The Washington State Office of the Attorney General reported on November 6, 2018, that Southwest Washington Regional Surgery Center, LLC experienced a data breach due to a phishing cyberattack, affecting 1,690 residents. The breach occurred between May 27, 2018, and August 13, 2018, with the compromised employee email account potentially exposing personal information including names, Social Security numbers, and medical information.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10588

TPRM report: https://www.rankiteo.com/company/southwest-washington-regional-surgery-center

"id": "sou506072525",
"linkid": "southwest-washington-regional-surgery-center",
"type": "Cyber Attack",
"date": "5/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1690,
                        'industry': 'Healthcare',
                        'location': 'Washington State',
                        'name': 'Southwest Washington Regional Surgery Center, '
                                'LLC',
                        'type': 'Healthcare'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 1690,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              'Medical information']},
 'date_detected': '2018-08-13',
 'date_publicly_disclosed': '2018-11-06',
 'description': 'Southwest Washington Regional Surgery Center, LLC experienced '
                'a data breach due to a phishing cyberattack, affecting 1,690 '
                'residents. The breach occurred between May 27, 2018, and '
                'August 13, 2018, with the compromised employee email account '
                'potentially exposing personal information including names, '
                'Social Security numbers, and medical information.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 'Medical information']},
 'initial_access_broker': {'entry_point': 'Compromised Employee Email Account'},
 'post_incident_analysis': {'root_causes': 'Phishing attack leading to '
                                           'compromised employee email '
                                           'account'},
 'references': [{'date_accessed': '2018-11-06',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Southwest Washington Regional Surgery Center Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Compromised Employee Email Account'}