UL Hospitals Group

UL Hospitals Group reported a massive data breach that unintentionally exposed the personal and medical data of over 1,000 patients to an unidentified third party.

Gastroenterology services were provided to the affected patients at University Hospital Limerick, Ennis Hospital, and Nenagh Hospital.

The email attachment that was compromised contained patient names, dates of birth, medical chart numbers, and limited medical information, according to a statement from ULHG.

No personal contact information, such as phone numbers or email addresses, was jeopardised.

Source: https://www.databreaches.net/ie-patients-info-accidentally-sent-to-unidentified-individual-by-ul-hospitals-group/

TPRM report: https://scoringcyber.rankiteo.com/company/ul-hospitals

"id": "ulh12504623",
"linkid": "ul-hospitals",
"type": "Data Leak",
"date": "06/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Over 1,000 patients',
                        'industry': 'Healthcare',
                        'location': 'Limerick',
                        'name': 'University Hospital Limerick',
                        'type': 'Hospital'},
                       {'customers_affected': 'Over 1,000 patients',
                        'industry': 'Healthcare',
                        'location': 'Ennis',
                        'name': 'Ennis Hospital',
                        'type': 'Hospital'},
                       {'customers_affected': 'Over 1,000 patients',
                        'industry': 'Healthcare',
                        'location': 'Nenagh',
                        'name': 'Nenagh Hospital',
                        'type': 'Hospital'}],
 'attack_vector': 'Email Attachment',
 'data_breach': {'number_of_records_exposed': 'Over 1,000',
                 'personally_identifiable_information': ['patient names',
                                                         'dates of birth',
                                                         'medical chart '
                                                         'numbers'],
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ['patient names',
                                              'dates of birth',
                                              'medical chart numbers',
                                              'limited medical information']},
 'description': 'UL Hospitals Group reported a massive data breach that '
                'unintentionally exposed the personal and medical data of over '
                '1,000 patients to an unidentified third party.',
 'impact': {'data_compromised': ['patient names',
                                 'dates of birth',
                                 'medical chart numbers',
                                 'limited medical information']},
 'threat_actor': 'Unidentified third party',
 'title': 'UL Hospitals Group Data Breach',
 'type': 'Data Breach'}