Valley View Hospital Association

Valley View Hospital Association suffered a data breach in January 2022, reported by the Maine Office of the Attorney General on April 28, 2022. The incident involved unauthorized access to four employees' email accounts, compromising the personal and limited medical information of 21,708 individuals. While the breach exposed sensitive data including names and medical details no specific cases of identity theft were documented. The attack targeted internal employee accounts, leading to potential exposure of patient information, though the full scope of misuse remains unclear. The hospital took corrective measures, but the breach underscored vulnerabilities in safeguarding both employee and patient data within healthcare systems. The lack of reported financial fraud or broader systemic disruption suggests the impact was contained to data exposure rather than operational or existential threats.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/cfc77f30-6527-425f-ab3b-760d2b455a96.shtml

TPRM report: https://www.rankiteo.com/company/valley-view-hospital

"id": "val017091825",
"linkid": "valley-view-hospital",
"type": "Breach",
"date": "1/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '21,708',
                        'industry': 'Healthcare',
                        'location': 'Maine, USA',
                        'name': 'Valley View Hospital Association',
                        'type': 'Hospital'}],
 'attack_vector': 'Compromised Email Accounts',
 'data_breach': {'number_of_records_exposed': '21,708',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Moderate (PII and PHI)',
                 'type_of_data_compromised': ['Personal Names',
                                              'Limited Medical Information']},
 'date_detected': '2022-01-19',
 'date_publicly_disclosed': '2022-04-28',
 'description': 'The Maine Office of the Attorney General reported that Valley '
                'View Hospital Association experienced a data breach involving '
                "unauthorized access to four employees' email accounts. The "
                'breach was discovered on January 19, 2022, and affected a '
                'total of 21,708 individuals. The compromised information may '
                'have included personal names and limited medical information; '
                'no specific identity theft incidents were reported.',
 'impact': {'data_compromised': ['Personal Names',
                                 'Limited Medical Information'],
            'identity_theft_risk': 'None reported',
            'systems_affected': ['4 Employee Email Accounts']},
 'references': [{'date_accessed': '2022-04-28',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General'},
 'title': 'Valley View Hospital Association Data Breach (2022)',
 'type': 'Data Breach (Unauthorized Access)'}