Three Rivers Provider Network

The U.S. Department of Health and Human Services reported that Three Rivers Provider Network experienced a hacking incident on December 19, 2022, affecting 4,725 individuals. The breach involved an email phishing scheme that compromised protected health information (PHI) including names, addresses, dates of birth, Social Security numbers, claims information, health insurance information, diagnoses, medications, and other treatment details.

Source: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf

TPRM report: https://www.rankiteo.com/company/three-rivers-provider-network-trpn

"id": "thr316071625",
"linkid": "three-rivers-provider-network-trpn",
"type": "Breach",
"date": "12/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 4725,
                        'industry': 'Healthcare',
                        'name': 'Three Rivers Provider Network',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 4725,
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'dates of birth',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Protected Health Information '
                                             '(PHI)'},
 'date_detected': '2022-12-19',
 'description': 'The U.S. Department of Health and Human Services reported '
                'that Three Rivers Provider Network experienced a hacking '
                'incident on December 19, 2022, affecting 4,725 individuals. '
                'The breach involved an email phishing scheme that compromised '
                'protected health information (PHI) including names, '
                'addresses, dates of birth, Social Security numbers, claims '
                'information, health insurance information, diagnoses, '
                'medications, and other treatment details.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'dates of birth',
                                 'Social Security numbers',
                                 'claims information',
                                 'health insurance information',
                                 'diagnoses',
                                 'medications',
                                 'treatment details']},
 'initial_access_broker': {'entry_point': 'Email'},
 'references': [{'source': 'U.S. Department of Health and Human Services'}],
 'title': 'Three Rivers Provider Network Data Breach',
 'type': 'Data Breach'}