South Country Health Alliance

The Maine Office of the Attorney General reported that South Country Health Alliance (SCHA) experienced unauthorized access to an employee email account on June 25, 2020, discovered on September 14, 2020. A total of 66,874 individuals were affected, including 3 residents of Maine who were notified on December 30, 2020. Personal information potentially compromised includes Social Security Numbers.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ac5bc20b-bfa1-4b3d-a25f-a58743eb6c0a.shtml

TPRM report: https://www.rankiteo.com/company/south-country-health-alliance

"id": "sou853080425",
"linkid": "south-country-health-alliance",
"type": "Breach",
"date": "6/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 66874,
                        'industry': 'Healthcare',
                        'name': 'South Country Health Alliance',
                        'type': 'Healthcare'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'number_of_records_exposed': 66874,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_detected': '2020-09-14',
 'date_publicly_disclosed': '2020-12-30',
 'description': 'Unauthorized access to an employee email account at South '
                'Country Health Alliance (SCHA) potentially compromising '
                'personal information including Social Security Numbers.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'title': 'South Country Health Alliance Email Account Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Access'}