UnityPoint Health

The California Office of the Attorney General reported that UnityPoint Health experienced a data breach due to a phishing email attack, with unauthorized access occurring between March 14, 2018 and April 3, 2018. The breach potentially exposed protected health information and personal information of unknown individuals; however, no misuse of such information has been reported. The incident was reported on July 30, 2018.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-138399

TPRM report: https://www.rankiteo.com/company/unity-point-health

"id": "uni548072725",
"linkid": "unity-point-health",
"type": "Breach",
"date": "3/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'California',
                        'name': 'UnityPoint Health',
                        'type': 'Healthcare Provider'}],
 'attack_vector': 'Phishing Email',
 'data_breach': {'type_of_data_compromised': ['Protected Health Information',
                                              'Personal Information']},
 'date_detected': '2018-04-03',
 'date_publicly_disclosed': '2018-07-30',
 'description': 'The California Office of the Attorney General reported that '
                'UnityPoint Health experienced a data breach due to a phishing '
                'email attack, with unauthorized access occurring between '
                'March 14, 2018 and April 3, 2018. The breach potentially '
                'exposed protected health information and personal information '
                'of unknown individuals; however, no misuse of such '
                'information has been reported. The incident was reported on '
                'July 30, 2018.',
 'impact': {'data_compromised': ['Protected Health Information',
                                 'Personal Information']},
 'references': [{'date_accessed': '2018-07-30',
                 'source': 'California Office of the Attorney General'}],
 'title': 'UnityPoint Health Data Breach',
 'type': 'Data Breach'}