Uintah Basin Healthcare

Uintah Basin Healthcare suffered a data breach due to external system hacking, discovered and reported on May 12, 2023, though the incident occurred between October 25, 2022, and November 7, 2022. The breach exposed sensitive personal data, including Social Security numbers, of 103,974 individuals, among whom 16 were Maine residents. The compromised information poses a high risk of identity theft, prompting the organization to offer identity theft protection services to affected individuals. The breach’s scale and the nature of the exposed data particularly SSNs, which are critical for financial and personal identity suggest severe reputational and operational consequences for the healthcare provider. The incident underscores vulnerabilities in their cybersecurity defenses, potentially eroding trust among patients and partners. While no immediate evidence of data misuse was reported, the exposure of such sensitive records heightens the likelihood of fraudulent activity, long-term financial harm to victims, and regulatory scrutiny.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/50d6b14a-ea71-4c64-95cf-71db833225f5.shtml

TPRM report: https://www.rankiteo.com/company/uintah-basin-medical-center

"id": "uin039091825",
"linkid": "uintah-basin-medical-center",
"type": "Breach",
"date": "10/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '103,974 (including 16 Maine '
                                              'residents)',
                        'industry': 'Healthcare',
                        'name': 'Uintah Basin Healthcare',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'External System Hacking',
 'customer_advisories': 'Identity theft protection services offered to '
                        'affected individuals',
 'data_breach': {'number_of_records_exposed': '103,974',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (includes PII)',
                 'type_of_data_compromised': ['Social Security numbers']},
 'date_publicly_disclosed': '2023-05-12',
 'description': "The Maine Attorney General's Office reported that Uintah "
                'Basin Healthcare experienced a data breach involving external '
                'system hacking. The breach occurred between October 25, 2022, '
                'and November 7, 2022, affecting 16 Maine residents out of a '
                'total of 103,974 individuals. The compromised information may '
                'have included Social Security numbers, and identity theft '
                'protection services were offered to affected individuals.',
 'impact': {'data_compromised': ['Social Security numbers'],
            'identity_theft_risk': 'High (identity theft protection services '
                                   'offered)'},
 'references': [{'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
                                                       "General's Office"},
 'response': {'communication_strategy': 'Identity theft protection services '
                                        'offered to affected individuals'},
 'title': 'Uintah Basin Healthcare Data Breach',
 'type': 'Data Breach'}