Spectrum Health Lakeland notified it's patients about a security breach after an unauthorized access to an individual who accessed an email account of one of its employees.
The information compromised includes patient names and addresses, the type of health services provided, dates, diagnosis information, and health insurance providers.
The organization reached out to the patients who were affected due to the breach and arranged for free identity theft protection services through Experian for affected patients for one year.
They also recommended those patients to monitor their accounts closely.
Source: https://www.wsjm.com/2019/05/08/spectrum-health-lakeland-warns-about-data-security-issue/
TPRM report: https://scoringcyber.rankiteo.com/company/spectrum-health-lakeland
"id": "spe121119323",
"linkid": "spectrum-health-lakeland",
"type": "Breach",
"date": "05/2019",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'Spectrum Health Lakeland',
'type': 'Healthcare Provider'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Patient names',
'Addresses',
'Type of health services '
'provided',
'Dates',
'Diagnosis information',
'Health insurance providers']},
'description': 'Spectrum Health Lakeland notified its patients about a '
'security breach after an unauthorized access to an individual '
'who accessed an email account of one of its employees. The '
'information compromised includes patient names and addresses, '
'the type of health services provided, dates, diagnosis '
'information, and health insurance providers. The organization '
'reached out to the patients who were affected due to the '
'breach and arranged for free identity theft protection '
'services through Experian for affected patients for one year. '
'They also recommended those patients to monitor their '
'accounts closely.',
'impact': {'data_compromised': ['Patient names',
'Addresses',
'Type of health services provided',
'Dates',
'Diagnosis information',
'Health insurance providers'],
'identity_theft_risk': True},
'initial_access_broker': {'entry_point': 'Email Account'},
'response': {'communication_strategy': ['Notified affected patients',
'Recommended monitoring of accounts'],
'remediation_measures': ['Free identity theft protection '
'services for affected patients'],
'third_party_assistance': ['Experian']},
'title': 'Spectrum Health Lakeland Email Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Weak Email Security'}