Zuckerberg San Francisco General Hospital and Trauma Center

The Zuckerberg San Francisco General Hospital's dinner tray tickets were inappropriately thrown into standard rubbish bins, according to a privacy breach that was reported by the San Francisco Department of Public Health.

According to public health experts, the tickets, which included the patients' full names, birth month and day, hospital bed or unit location, diet information, and the meal they had been given, were meant to be shredded in secret.

The employee informed the department that he had been inappropriately disposing of them since June on November 15, which is when the error was discovered.

In the impacted units where the employee delivered food trays, there were 1,174 patients getting treated, and letters were being written to them.

Source: https://www.nbcbayarea.com/news/local/san-francisco/privacy-breach-involving-meal-tray-tickets-at-zuckerberg-san-francisco-general-hospital-dph/2192937/

TPRM report: https://scoringcyber.rankiteo.com/company/zuckerberg-san-francisco-general-hospital-trauma-center

"id": "zuc0138523",
"linkid": "zuckerberg-san-francisco-general-hospital-trauma-center",
"type": "Data Leak",
"date": "11/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1174,
                        'industry': 'Healthcare',
                        'location': 'San Francisco',
                        'name': 'Zuckerberg San Francisco General Hospital',
                        'type': 'Hospital'}],
 'attack_vector': 'Improper Disposal',
 'data_breach': {'number_of_records_exposed': 1174,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Medium',
                 'type_of_data_compromised': ["Patients' full names",
                                              'Birth month and day',
                                              'Hospital bed or unit location',
                                              'Diet information',
                                              'Meal information']},
 'date_detected': '2023-11-15',
 'description': 'Dinner tray tickets containing patient information were '
                'inappropriately thrown into standard rubbish bins instead of '
                'being shredded securely.',
 'impact': {'data_compromised': ["Patients' full names",
                                 'Birth month and day',
                                 'Hospital bed or unit location',
                                 'Diet information',
                                 'Meal information']},
 'motivation': 'Negligence',
 'post_incident_analysis': {'root_causes': 'Human Error'},
 'references': [{'source': 'San Francisco Department of Public Health'}],
 'threat_actor': 'Internal Employee',
 'title': 'Privacy Breach at Zuckerberg San Francisco General Hospital',
 'type': 'Privacy Breach',
 'vulnerability_exploited': 'Human Error'}