University of Iowa Health Care

University of Iowa Health Care (UIHC) suffered from a data breach incident that exposed 5,300 patients' information.

The information in the compromised files according to the UIHC inquiry, contained the patient's name, admission date, and medical record number.

Social Security numbers, credit card numbers, and other financial information were not included in the files, nor were any clinical details (such as diagnosis data).

All impacted people for whom UIHC has valid addresses have received letters via U.S. postal mail.

Source: https://www.databreaches.net/university-of-iowa-health-care-notifies-5292-patients-about-files-exposed-online-for-two-years/

TPRM report: https://scoringcyber.rankiteo.com/company/university-of-iowa-hospitals-and-clinics

"id": "uni859311022",
"linkid": "university-of-iowa-hospitals-and-clinics",
"type": "Breach",
"date": "07/2017",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': '5,300 patients',
                        'industry': 'Healthcare',
                        'location': 'Iowa, USA',
                        'name': 'University of Iowa Health Care (UIHC)',
                        'type': 'Healthcare'}],
 'data_breach': {'number_of_records_exposed': '5,300',
                 'personally_identifiable_information': ["Patient's name",
                                                         'Medical record '
                                                         'number'],
                 'sensitivity_of_data': 'Moderate',
                 'type_of_data_compromised': ["Patient's name",
                                              'Admission date',
                                              'Medical record number']},
 'description': 'University of Iowa Health Care (UIHC) suffered from a data '
                "breach incident that exposed 5,300 patients' information.",
 'impact': {'data_compromised': ["Patient's name",
                                 'Admission date',
                                 'Medical record number']},
 'response': {'communication_strategy': 'Letters sent to all impacted '
                                        'individuals via U.S. postal mail'},
 'title': 'University of Iowa Health Care Data Breach',
 'type': 'Data Breach'}