The data breach began with a compromised employee email account.
Mercy Iowa City hospital this week reported that an internal email compromise and phishing email incident led to the exposure of personal information of some 60,473 individuals.
An attacker had compromised a hospital employee's email account and sent out phishing emails between May 15 and June 24, 2020. This ultimately led to the exposure of recipients' names, Social Security numbers, driver's license numbers, dates of birth, medical treatment information, and health insurance data. The hospital said in a letter to the affected individuals that it was not aware of any instances of fraud or identity theft as a result of the breach.
Mercy Iowa City is offering 12 months of free credit monitoring and identity theft protection for individuals whose SSNs or driver's license numbers were affected.
Read more here.
About the Author(s)
You May Also Like
Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024Where and Why Threat Intelligence Makes Sense for Your Enterprise Security Strategy
May 15, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024