The Maine Office of the Attorney General reported that Mercy Iowa City experienced a data breach from May 15, 2020, to June 24, 2020, impacting 92,795 individuals. The breach resulted from unauthorized access to an employee's email account, exposing Social Security Numbers. Identity theft protection services were offered for one year through Experian IdentityWorks Credit 3B.
TPRM report: https://www.rankiteo.com/company/uihealthcaredowntown
"id": "uih019072825",
"linkid": "uihealthcaredowntown",
"type": "Breach",
"date": "5/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 92795,
'industry': 'Healthcare',
'location': 'Iowa City, IA',
'name': 'Mercy Iowa City',
'type': 'Healthcare Provider'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 92795,
'personally_identifiable_information': 'Social Security '
'Numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Social Security Numbers'},
'date_detected': '2020-06-24',
'description': "Unauthorized access to an employee's email account at Mercy "
'Iowa City resulted in a data breach impacting 92,795 '
'individuals, exposing Social Security Numbers.',
'impact': {'data_compromised': ['Social Security Numbers'],
'identity_theft_risk': 'High',
'systems_affected': ['Email Account']},
'initial_access_broker': {'entry_point': 'Email Account'},
'post_incident_analysis': {'root_causes': 'Unauthorized Access to Email '
'Account'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'response': {'third_party_assistance': ['Experian IdentityWorks Credit 3B']},
'title': 'Mercy Iowa City Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Access'}