On November 7, 2022, Uintah Basin Healthcare (UBH) experienced a data breach that exposed the personal and protected health information (PHI) of patients treated between March 2012 and November 2022. The compromised data included highly sensitive details such as names, dates of birth, addresses, Social Security numbers, and clinical records. The breach was reported to the Vermont Office of the Attorney General on May 9, 2023, with notifications sent to all affected patients by April 10, 2023. The incident suggests a significant compromise of patient confidentiality, posing risks of identity theft, financial fraud, and unauthorized access to medical histories. Given the nature of the exposed data particularly Social Security numbers and clinical details the breach carries severe implications for patient privacy and trust in the healthcare provider. The long duration between the breach occurrence and its discovery further exacerbates the potential for misuse of the stolen information.
Source: https://ago.vermont.gov/document/2023-05-09-uintah-basin-healthcare-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/uintah-basin-medical-center
"id": "uin028090625",
"linkid": "uintah-basin-medical-center",
"type": "Breach",
"date": "3/2012",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'All patients seen between March '
'2012 and November 2022',
'industry': 'Healthcare',
'location': 'Vermont, USA (likely Utah, given the '
'name; clarification needed)',
'name': 'Uintah Basin Healthcare (UBH)',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Patients notified by April 10, 2023',
'data_breach': {'data_exfiltration': 'Likely (data was compromised)',
'number_of_records_exposed': 'All patients seen between March '
'2012 and November 2022 (exact '
'number unspecified)',
'personally_identifiable_information': ['Names',
'Dates of birth',
'Addresses',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High (includes SSNs and clinical '
'details)',
'type_of_data_compromised': ['Personal Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2022-11-07',
'date_publicly_disclosed': '2023-05-09',
'description': 'On May 9, 2023, the Vermont Office of the Attorney General '
'reported a data breach involving Uintah Basin Healthcare '
'(UBH). The breach, which occurred on November 7, 2022, may '
'have affected personal and protected health information of '
'patients who received care from UBH between March 2012 and '
'November 2022, including names, dates of birth, addresses, '
'Social Security numbers, and clinical details. Approximately '
'all patients seen during the specified timeframe were '
'notified by April 10, 2023.',
'impact': {'brand_reputation_impact': 'Potential reputational harm due to '
'exposure of sensitive patient data',
'data_compromised': ['Names',
'Dates of birth',
'Addresses',
'Social Security numbers',
'Clinical details'],
'identity_theft_risk': 'High (due to exposure of SSNs and personal '
'details)'},
'references': [{'date_accessed': '2023-05-09',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA (likely, given '
'exposure of PHI)'],
'regulatory_notifications': 'Reported to the '
'Vermont Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Patient notifications sent by April '
'10, 2023'},
'title': 'Uintah Basin Healthcare Data Breach (2022)',
'type': 'Data Breach'}