The California Office of the Attorney General reported on February 26, 2021, that Santa Rosa Community Health experienced a data breach on January 29, 2020, which may have impacted the protected health information (PHI) of individuals, including names and Social Security numbers. The breach occurred due to unauthorized access to a corporate email account, and approximately 15,000 individuals were potentially affected.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-538397
TPRM report: https://www.rankiteo.com/company/srhealth
"id": "srh952072725",
"linkid": "srhealth",
"type": "Breach",
"date": "1/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 15000,
'industry': 'Healthcare',
'location': 'Santa Rosa, California',
'name': 'Santa Rosa Community Health',
'type': 'Healthcare Provider'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'number_of_records_exposed': 15000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers']},
'date_detected': '2020-01-29',
'date_publicly_disclosed': '2021-02-26',
'description': 'Unauthorized access to a corporate email account potentially '
'impacted the protected health information (PHI) of '
'approximately 15,000 individuals, including names and Social '
'Security numbers.',
'impact': {'data_compromised': ['Names', 'Social Security numbers']},
'initial_access_broker': {'entry_point': 'Corporate Email Account'},
'references': [{'date_accessed': '2021-02-26',
'source': 'California Office of the Attorney General'}],
'title': 'Santa Rosa Community Health Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Corporate Email Account'}