Yale New Haven Hospital

Yale New Haven Hospital (YNHH) suffered a data breach incident after a file created for research was unintentionally posted on a public facing website and was accessed by a small number of people.

The exposed file included name, telephone number, email address, age range, preferred language, medical record number, procedure type, and date and location of service.

YNHH engaged a third-party forensic firm to assist us in our investigation and ensured the website and content were no longer accessible or searchable via the internet.

Source: https://www.databreaches.net/patient-radiology-files-accidentally-exposed-online-by-yale-new-haven-hospital/

TPRM report: https://scoringcyber.rankiteo.com/company/yale-new-haven-hospital

"id": "yal211817922",
"linkid": "yale-new-haven-hospital",
"type": "Breach",
"date": "04/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Healthcare',
                        'location': 'New Haven, Connecticut',
                        'name': 'Yale New Haven Hospital',
                        'type': 'Healthcare'}],
 'attack_vector': 'Unintentional Public Exposure',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Name',
                                              'Telephone Number',
                                              'Email Address',
                                              'Age Range',
                                              'Preferred Language',
                                              'Medical Record Number',
                                              'Procedure Type',
                                              'Date and Location of Service']},
 'description': 'Yale New Haven Hospital (YNHH) suffered a data breach '
                'incident after a file created for research was '
                'unintentionally posted on a public facing website and was '
                'accessed by a small number of people. The exposed file '
                'included name, telephone number, email address, age range, '
                'preferred language, medical record number, procedure type, '
                'and date and location of service.',
 'impact': {'data_compromised': ['Name',
                                 'Telephone Number',
                                 'Email Address',
                                 'Age Range',
                                 'Preferred Language',
                                 'Medical Record Number',
                                 'Procedure Type',
                                 'Date and Location of Service']},
 'response': {'containment_measures': 'Ensured the website and content were no '
                                      'longer accessible or searchable via the '
                                      'internet',
              'third_party_assistance': 'Engaged a third-party forensic firm'},
 'title': 'Yale New Haven Hospital Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}