Wyoming County Community Health System

Wyoming County Community Health System (WCCHS) suffered a data breach on March 28, 2023, exposing sensitive personal information of nine Maine residents. The unauthorized access compromised critical data, including names, Social Security numbers, and medical records. The breach was severe due to the nature of the exposed information, which could lead to identity theft, financial fraud, or misuse of medical history. Notification letters were dispatched to affected individuals on November 16, 2023, nearly eight months after the incident, raising concerns about delayed response and potential prolonged exposure of the stolen data. As a healthcare provider, WCCHS holds highly sensitive patient information, making this breach particularly damaging to trust and regulatory compliance. The incident underscores vulnerabilities in cybersecurity measures, especially in sectors handling confidential health records.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/10d35df9-ccc3-4ad5-bbc6-64ed0d64108f.shtml

TPRM report: https://www.rankiteo.com/company/wyoming-county-community-health-system

"id": "wyo421082125",
"linkid": "wyoming-county-community-health-system",
"type": "Breach",
"date": "3/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '9 (Maine residents)',
                        'industry': 'Healthcare',
                        'location': 'Wyoming County, USA',
                        'name': 'Wyoming County Community Health System '
                                '(WCCHS)',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Notification letters sent to affected Maine residents '
                        '(November 16, 2023)',
 'data_breach': {'data_exfiltration': 'Likely (unauthorized access confirmed)',
                 'number_of_records_exposed': '9 (Maine residents)',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers',
                                                         'medical information'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2023-03-28',
 'description': "The Maine Attorney General's Office reported that Wyoming "
                'County Community Health System (WCCHS) experienced a data '
                'breach on March 28, 2023, affecting nine Maine residents. The '
                'breach involved unauthorized access to personal information, '
                'including names, Social Security numbers, and medical '
                'information, with notification letters sent on November 16, '
                '2023.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'medical information'],
            'identity_theft_risk': 'High (PII and medical data exposed)'},
 'references': [{'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulations_violated': ['Potentially HIPAA (Health '
                                                    'Insurance Portability and '
                                                    'Accountability Act)'],
                           'regulatory_notifications': ['Maine Attorney '
                                                        "General's Office"]},
 'response': {'communication_strategy': 'Notification letters sent to affected '
                                        'individuals (November 16, 2023)'},
 'title': 'Wyoming County Community Health System Data Breach',
 'type': 'Data Breach'}