VCU Health

Virginia Commonwealth University Health System suffered from a data breach incident, 2,700 people's minor child’s electronic medical records unwarranted accesses were made to their medical records.

According to an investigation, certain community physician groups' workers and an employee of a contracted vendor gained access to patient service information at the VCU Health System without having valid business grounds.

The incidences led to the individual employers firing the workers.

Source: https://www.databreaches.net/vcu-health-system-notifies-2700-of-inappropriate-access-to-their-medical-records/

TPRM report: https://scoringcyber.rankiteo.com/company/vcu-health-system

"id": "vcu131729722",
"linkid": "vcu-health-system",
"type": "Breach",
"date": "01/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 2700,
                        'industry': 'Healthcare',
                        'location': 'Virginia, USA',
                        'name': 'Virginia Commonwealth University Health '
                                'System',
                        'type': 'Healthcare'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 2700,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Electronic medical records of '
                                              'minor children']},
 'description': 'Virginia Commonwealth University Health System suffered from '
                "a data breach incident where 2,700 people's minor child’s "
                'electronic medical records were accessed without valid '
                "business grounds by certain community physician groups' "
                'workers and an employee of a contracted vendor.',
 'impact': {'data_compromised': True},
 'response': {'remediation_measures': ['Firing the workers involved']},
 'threat_actor': ['Workers of certain community physician groups',
                  'Employee of a contracted vendor'],
 'title': 'Data Breach at Virginia Commonwealth University Health System',
 'type': 'Data Breach'}