HackingHealthcareHealthcareCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Advocate Sherman Hospital
bd_d09fce1f635401dc · schema v1 · pii pii-v1
Full breach record for Advocate Sherman Hospital →Advocate Sherman Hospital notified individuals that its former service provider Jobscience (Bullhorn, Inc.) suffered a data breach in or around May 2018, in which an unauthorized third party gained access to and acquired data from Jobscience's server used to process job applications. Data involved included names, contact information, dates of birth, resumes, and Social Security Numbers. Individuals were notified in March 2019 after the hospital confirmed involvement in February 2019.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1973f4901cf3b97aMontana State AGfiled 2019-03-08(5d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-145430
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2019
- Raw hash
- ccdad57bcdfe8e9454c46d7d5ec1ddcda3cdc02b926fa2f91668aae35fed9d00
Reporting entity
- Name
- Advocate Sherman Hospitalnorm: advocate sherman hospital
Victim entity
- Name
- Advocate Sherman Hospitalnorm: advocate sherman hospital
- Industry
- Healthcarellm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Mar 1, 2019
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Bullhorn, Inc.'s Jobscience
- Initial access
- supply_chain
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.