Utah Imaging Associates, Inc.

On September 4, 2021, Utah Imaging Associates, Inc. (UIA) experienced a data breach reported by the California Office of the Attorney General on November 18, 2021. The incident exposed highly sensitive personal and medical information of an unspecified number of individuals. Compromised data included names, mailing addresses, dates of birth, Social Security numbers, health insurance policy numbers, and medical records. Such a breach poses severe risks, including identity theft, financial fraud, and unauthorized access to private health details. The exposure of Social Security numbers and medical information elevates the potential for long-term harm, as this data can be exploited for malicious purposes like insurance fraud or targeted scams. The breach underscores vulnerabilities in UIA’s data protection measures, raising concerns about compliance with healthcare privacy regulations (e.g., HIPAA) and the broader implications for patient trust in the organization’s ability to safeguard confidential information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-547748

TPRM report: https://www.rankiteo.com/company/utah-imaging-associates-inc

"id": "uta017091825",
"linkid": "utah-imaging-associates-inc",
"type": "Breach",
"date": "9/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Healthcare',
                        'location': 'Utah, USA',
                        'name': 'Utah Imaging Associates, Inc. (UIA)',
                        'type': 'Healthcare Provider'}],
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2021-09-04',
 'date_publicly_disclosed': '2021-11-18',
 'description': 'On November 18, 2021, the California Office of the Attorney '
                'General reported a data breach involving Utah Imaging '
                'Associates, Inc. (UIA) that occurred on September 4, 2021. '
                'The breach may have exposed sensitive personal information '
                'including names, mailing addresses, dates of birth, Social '
                'Security numbers, health insurance policy numbers, and '
                'medical information, affecting an unknown number of '
                'individuals.',
 'impact': {'data_compromised': ['names',
                                 'mailing addresses',
                                 'dates of birth',
                                 'Social Security numbers',
                                 'health insurance policy numbers',
                                 'medical information'],
            'identity_theft_risk': 'High (PII and medical data exposed)'},
 'references': [{'date_accessed': '2021-11-18',
                 'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['California Consumer '
                                                    'Privacy Act (CCPA)',
                                                    'Health Insurance '
                                                    'Portability and '
                                                    'Accountability Act '
                                                    '(HIPAA)'],
                           'regulatory_notifications': 'California Office of '
                                                       'the Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Office of the Attorney General'},
 'title': 'Data Breach at Utah Imaging Associates, Inc. (UIA)',
 'type': 'Data Breach'}