US Saint Agnes Health Care Inc. 2015 Malware Attack (Q16256)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US Saint Agnes Health Care Inc. 2015 Malware Attack |
A data breach risk event |
Statements
4CEA8F81-1A9A-4890-B88D-B1237679B4C3
January 2015
0 references
Hackers accessed personal information of about 25,000 patients at Saint Agnes Health Care Inc. The breach resulted from an email phishing incident that targeted employee email accounts to access protected health information. The Baltimore health system on Monday said it sent letters to 25,000 individuals notifying them of the incident, which compromised at least one of the following personal details: name, date of birth, gender, medical record number, insurance information and limited clinical information. In four cases, patients social security numbers were accessed. After discovering the problem, Saint Agnes shut down the email accounts username and password and worked with computer forensics experts to analyze what information was affected. The health system said it is working with its (English)
