UNC Hospitals

"UNC Hospitals discovered that one SOM faculty member's email account have been compromised by an unauthorised party.

SOM and UNC Hospitals shut down the affected email account, launched an investigation, and hired a cyber security company to help in the inquiry.

SOM and UNC Hospitals have no indication that any other SOM or UNC Hospitals user email accounts or patient information systems were involved or accessed.

No evidence of improper use of patient information has been found at SOM or UNC Hospitals.

The SOM and UNC Hospitals advise patients to carefully go over the billing statement they get from their healthcare providers.

Source: https://www.businesswire.com/news/home/20210719005463/en/Patients-to-be-Notified-of-Unauthorized-Access-to-a-Single-UNC-School-of-Medicine-Email-Account

TPRM report: https://scoringcyber.rankiteo.com/company/unchospitals

"id": "unc2295223",
"linkid": "unchospitals",
"type": "Breach",
"date": "04/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'name': 'UNC Hospitals',
                        'type': 'Healthcare'}],
 'attack_vector': 'Email Compromise',
 'customer_advisories': 'Review billing statements carefully',
 'description': "UNC Hospitals discovered that one SOM faculty member's email "
                'account had been compromised by an unauthorized party. SOM '
                'and UNC Hospitals shut down the affected email account, '
                'launched an investigation, and hired a cyber security company '
                'to help in the inquiry. No evidence of improper use of '
                'patient information has been found.',
 'impact': {'systems_affected': ['Email Account']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'investigation_status': 'Ongoing',
 'response': {'communication_strategy': 'Advise patients to carefully review '
                                        'billing statements',
              'containment_measures': 'Shut down affected email account',
              'third_party_assistance': 'Cyber Security Company'},
 'title': 'UNC Hospitals Email Account Compromise',
 'type': 'Email Account Compromise'}