New York Racing Association (“NYRA”) suffered a data breach after it was targeted by the Hive ransomware attack.
The hackers obtained access to certain information belonging to certain current and former NYRA employees and compromised certain information including the first and last names, Social Security numbers, driver’s license numbers, health records, health insurance information and other personal information.
NYRA sent the data breach letters to all affected parties and asked them to be alerted.
Source: https://www.jdsupra.com/legalnews/new-york-racing-association-reports-8891996/
TPRM report: https://www.rankiteo.com/company/the-new-york-racing-association
"id": "the231725922",
"linkid": "the-new-york-racing-association",
"type": "Ransomware",
"date": "6/2017",
"severity": "80",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Sports and Entertainment',
'location': 'New York, USA',
'name': 'New York Racing Association',
'type': 'Organization'}],
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['first and last names',
'Social Security numbers',
'driver’s license numbers',
'health records',
'health insurance information',
'other personal information']},
'description': 'New York Racing Association (NYRA) suffered a data breach '
'after it was targeted by the Hive ransomware attack. The '
'hackers obtained access to certain information belonging to '
'certain current and former NYRA employees and compromised '
'certain information including the first and last names, '
'Social Security numbers, driver’s license numbers, health '
'records, health insurance information and other personal '
'information. NYRA sent data breach letters to all affected '
'parties and asked them to be alerted.',
'impact': {'data_compromised': ['first and last names',
'Social Security numbers',
'driver’s license numbers',
'health records',
'health insurance information',
'other personal information']},
'ransomware': {'ransomware_strain': 'Hive'},
'response': {'communication_strategy': 'Sent data breach letters to all '
'affected parties'},
'threat_actor': 'Hive ransomware group',
'title': 'New York Racing Association Data Breach',
'type': 'Data Breach, Ransomware'}