The California Office of the Attorney General reported that UC San Diego Health experienced a data breach involving unauthorized access to employee email accounts. The incident occurred between December 2, 2020, and April 8, 2021, affecting personal information including Social Security numbers and medical details. The breach was reported on September 9, 2021.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-545117
TPRM report: https://www.rankiteo.com/company/ucsdhealth
"id": "ucs913080425",
"linkid": "ucsdhealth",
"type": "Breach",
"date": "12/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Healthcare',
'location': 'San Diego, California',
'name': 'UC San Diego Health',
'type': 'Healthcare'}],
'attack_vector': 'Email Compromise',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'medical details']},
'date_detected': 'April 8, 2021',
'date_publicly_disclosed': 'September 9, 2021',
'description': 'Unauthorized access to employee email accounts compromising '
'personal information including Social Security numbers and '
'medical details.',
'impact': {'data_compromised': ['Social Security numbers', 'medical details']},
'initial_access_broker': {'entry_point': 'Email Compromise'},
'references': [{'date_accessed': 'September 9, 2021',
'source': 'California Office of the Attorney General'}],
'title': 'UC San Diego Health Data Breach',
'type': 'Data Breach'}