Exploit: Misconfiguration
Practice Resources LLC: Medical Billing Service
Risk to Business: 1.687 = Severe
Practice Resources LLC (PRL) is at the center of a ransomware attack that led to a supply chain data breach impacting 26 healthcare organizations. In a filing, PRL declared that 942,138 people had data exposed in the April 2022 incident. The company provides billing and other related services to healthcare providers. PRL declared that it has sent out data breach letters to all affected parties.
Individual Risk: 1.733 = Severe
The information exposed in the attack included patient names, addresses, health plan numbers, dates of treatment, and medical record numbers.
How It Could Affect Your Customers’ Business: Supply chain risk has been a constantly rising risk for businesses as bad actors target service providers.
Risk Levels:
1 - 1.5 = Extreme Risk
1.51 - 2.49 = Severe Risk
2.5 - 3 = Moderate Risk
*The risk score is calculated using a formula that considers a wide range of factors related to the assessed breach.