An unauthorized actor gained access to the Christie Business Holdings Company between July 14, 2021, and August 19, 2021. The attacker intended to intercept a business transaction between Christie Clinic and a third-party vendor and affect its business activities by compromising one of its business email accounts. The incident might have revealed the patient's information such as name and address, Social Security number, medical information, and health insurance information.