St. Bernards Healthcare, Inc.

On November 13, 2023, the Maine Office of the Attorney General reported that St. Bernards Healthcare, Inc. experienced a data breach involving unauthorized access to their MOVEit Transfer server on May 30, 2023. The breach affected approximately 89,556 individuals, revealing data including names, Social Security numbers, dates of birth, and health information. Welltok, Inc. is providing 24 months of credit monitoring services to those affected.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4d5e9333-1688-49c8-8a4e-cee4be344e15.shtml

TPRM report: https://www.rankiteo.com/company/st-bernards-healthcare

"id": "st-252072825",
"linkid": "st-bernards-healthcare",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 89556,
                        'industry': 'Healthcare',
                        'name': 'St. Bernards Healthcare, Inc.',
                        'type': 'Healthcare'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 89556,
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers',
                                                         'dates of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers',
                                              'dates of birth',
                                              'health information']},
 'date_detected': '2023-05-30',
 'date_publicly_disclosed': '2023-11-13',
 'description': 'Unauthorized access to MOVEit Transfer server resulting in '
                'data breach affecting approximately 89,556 individuals.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'dates of birth',
                                 'health information'],
            'systems_affected': ['MOVEit Transfer server']},
 'references': [{'date_accessed': '2023-11-13',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'third_party_assistance': ['Welltok, Inc.']},
 'title': 'St. Bernards Healthcare Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer server'}