Utah Department of Corrections

The Utah Department of Corrections (UDC) suffered from a data breach incident after a medical records error that muddles prescription information has caused a crisis for Utah inmates.

A fresh medical record was merged after the relocation.

And all of these refill prescriptions appear to have been lost in that new record.

So that prisoners began to run short of medications.

They investigated the incident and provided vast systemic improvements and successfully phase out an antiquated database.

Source: https://www.abc4.com/news/local-news/crisis-for-utah-prisoners-as-medical-records-glitch-scrambles-prescription-info/

TPRM report: https://scoringcyber.rankiteo.com/company/utahcorrections

"id": "uta1624121122",
"linkid": "utahcorrections",
"type": "Breach",
"date": "08/2022",
"severity": "75",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': ['Inmates'],
                        'industry': 'Corrections',
                        'location': 'Utah',
                        'name': 'Utah Department of Corrections',
                        'type': 'Government Agency'}],
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Medical records',
                                              'Prescription information']},
 'description': 'A medical records error caused a mix-up in prescription '
                'information, leading to a crisis for Utah inmates. Fresh '
                'medical records were merged after relocation, causing refill '
                'prescriptions to be lost and prisoners to run short of '
                'medications.',
 'impact': {'customer_complaints': ['Inmates'],
            'data_compromised': ['Medical records', 'Prescription information'],
            'operational_impact': ['Systemic improvements',
                                   'Phasing out an antiquated database'],
            'systems_affected': ['Antiquated database']},
 'post_incident_analysis': {'corrective_actions': ['Systemic improvements',
                                                   'Phasing out an antiquated '
                                                   'database'],
                            'root_causes': ['Medical records error',
                                            'Antiquated database']},
 'response': {'remediation_measures': ['Systemic improvements',
                                       'Phasing out an antiquated database']},
 'title': 'Utah Department of Corrections Data Breach',
 'type': 'Data Breach'}