UCLA Health

UCLA health experienced a data breach incident that 94,000 patients personal information and health data to third parties.

UCLA Health promptly disabled the use of the tools and launched an investigation.

The compromised information includes patients’ URL/website addresses, provider names, specialty, ad campaign names, page views, IP addresses, third-party cookies, and hashed values of certain fields on the appointment request form, such as patient names, email addresses, mailing addresses, phone numbers, and genders.

UCLA Health website and the UCLA Health mobile app were affected. The UCLA Health patient portal was not impacted.

Source: https://www.scmagazine.com/analysis/breach/maryland-hospital-facing-outages-after-significant-ransomware-attack

TPRM report: https://scoringcyber.rankiteo.com/company/ucla-health

"id": "ucl11139223",
"linkid": "ucla-health",
"type": "Data Leak",
"date": "06/2022",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '94,000',
                        'industry': 'Healthcare',
                        'location': 'Los Angeles, California',
                        'name': 'UCLA Health',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'number_of_records_exposed': '94,000',
                 'personally_identifiable_information': ['Patient names',
                                                         'Email addresses',
                                                         'Mailing addresses',
                                                         'Phone numbers',
                                                         'Genders'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Health Data']},
 'description': 'UCLA Health experienced a data breach incident affecting '
                "94,000 patients' personal information and health data to "
                'third parties.',
 'impact': {'data_compromised': ['URL/website addresses',
                                 'Provider names',
                                 'Specialty',
                                 'Ad campaign names',
                                 'Page views',
                                 'IP addresses',
                                 'Third-party cookies',
                                 'Hashed values of certain fields on the '
                                 'appointment request form, such as patient '
                                 'names, email addresses, mailing addresses, '
                                 'phone numbers, and genders'],
            'systems_affected': ['UCLA Health website',
                                 'UCLA Health mobile app']},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'UCLA Health'}],
 'response': {'containment_measures': 'Disabled the use of the tools'},
 'title': 'UCLA Health Data Breach',
 'type': 'Data Breach'}