Phishing email leads to Denver area health care breach

Hackers may have accessed the personal health data belonging to patients of Denver area-based Metro Community Provider Network, a nonprofit health care provider for low-income individuals and families.

How many victims? Approximately 2,000.

What type of personal information? Names, phone numbers, dates of birth, diagnoses and internal account numbers.

What happened? An employee responded to a phishing email that allowed hackers to steal credentials, giving them access to the corporate network.

What was the response? As the organization investigates, employees are being asked to change their login information.

Quote: "Metro Community Provider Network sincerely apologizes for the inconvenience and concern this incident causes," it said in a statement.

 
Source: ModernHealthcare.com, "Colo. provider reports possible breach," Feb. 2, 2012.


Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.