The Montana Department of Justice reported that the University of Utah experienced a data breach on February 3, 2020, involving unauthorized access to an employee's email account, affecting 10 individuals. The compromised information may have included names, dates of birth, medical record numbers, and limited clinical information.
Source: https://dojmt.gov/office-of-consumer-protection/reported-data-breaches/
TPRM report: https://www.rankiteo.com/company/university-of-utah-health
"id": "uni310071625",
"linkid": "university-of-utah-health",
"type": "Breach",
"date": "2/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 10,
'industry': 'Education',
'location': 'Utah, USA',
'name': 'University of Utah',
'type': 'Educational Institution'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'number_of_records_exposed': 10,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'dates of birth',
'medical record numbers',
'limited clinical information']},
'date_detected': '2020-02-03',
'description': "Unauthorized access to an employee's email account, affecting "
'10 individuals. The compromised information may have included '
'names, dates of birth, medical record numbers, and limited '
'clinical information.',
'impact': {'data_compromised': ['names',
'dates of birth',
'medical record numbers',
'limited clinical information']},
'initial_access_broker': {'entry_point': 'Email Account'},
'references': [{'source': 'Montana Department of Justice'}],
'title': 'University of Utah Data Breach',
'type': 'Data Breach'}