US Sacred Heart Health Systems Feb 2015 Social Engineering (Q16875)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US Sacred Heart Health Systems Feb 2015 Social Engineering |
A data breach risk event |
Statements
D7425785-BD93-4229-B98B-0CA4D94AC7D6
February 2015
0 references
Sacred Heart Health Systems is reporting a security breach at one of its third-party vendors has resulted in the possible exposure of health and personal information of about 14,000 patients. Monday, the hospital said that on February 2, they were by a third-party billing vendor that one of its employees email login information had been compromised as the result of an email phishing attack. The hacking attack was detected by the billing vendor on December 3 and the employees username and password were shut down the same day. Upon notice of the incident, Sacred Heart, in cooperation with the billing vendor, immediately launched a thorough investigation into the matter. Sacred Heart engaged computer forensics experts who were able to conduct an analysis of what information was included in t (English)
1 reference
