Summit Behavioral Healthcare, LLC

The Maine Attorney General's Office was notified on February 26, 2021, about a data breach at Summit Behavioral Healthcare, LLC (SBHC) that began in late May 2020. The breach involved unauthorized access to two employee email accounts, potentially affecting the protected health information (PHI) of one Maine resident, whose information may have included Social Security numbers. SBHC is offering 12 months of complimentary identity protection services to the affected individual.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/08078a33-fd8b-4398-ad0a-dfd024267f0d.shtml

TPRM report: https://www.rankiteo.com/company/summit-behavioral-healthcare

"id": "sum326072425",
"linkid": "summit-behavioral-healthcare",
"type": "Breach",
"date": "5/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '1',
                        'industry': 'Healthcare',
                        'name': 'Summit Behavioral Healthcare, LLC',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Unauthorized Access to Email Accounts',
 'data_breach': {'number_of_records_exposed': '1',
                 'personally_identifiable_information': 'Social Security '
                                                        'numbers',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Protected Health Information '
                                              '(PHI)',
                                              'Social Security numbers']},
 'date_detected': '2021-02-26',
 'description': "The Maine Attorney General's Office was notified on February "
                '26, 2021, about a data breach at Summit Behavioral '
                'Healthcare, LLC (SBHC) that began in late May 2020. The '
                'breach involved unauthorized access to two employee email '
                'accounts, potentially affecting the protected health '
                'information (PHI) of one Maine resident, whose information '
                'may have included Social Security numbers. SBHC is offering '
                '12 months of complimentary identity protection services to '
                'the affected individual.',
 'impact': {'data_compromised': ['Protected Health Information (PHI)',
                                 'Social Security numbers'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Email Accounts']},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'references': [{'date_accessed': '2021-02-26',
                 'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
                                                        "General's Office"]},
 'response': {'remediation_measures': ['12 months of complimentary identity '
                                       'protection services']},
 'title': 'Data Breach at Summit Behavioral Healthcare, LLC',
 'type': 'Data Breach'}