Incident Score: Analysis & Impact (MID1777588198)

In this Rankiteo incident briefing, we review the Mid-South Pulmonary & Sleep Specialists P.C. breach identified under incident ID MID1777588198.

The analysis begins with a detailed overview of Mid-South Pulmonary & Sleep Specialists P.C.'s information like the linkedin page: https://www.linkedin.com/company/mid-south-pulmonary, the number of followers: 174, the industry type: Medical Practices and the number of employees: 42 employees

After the initial compromise, the video explains how Rankiteo's incident engine converts technical details into a normalized incident score. The incident score before the incident was 756 and after the incident was 688 with a difference of -68 which is could be a good indicator of the severity and impact of the incident.

In the next step of the video, we will analyze in more details the incident and the impact it had on Mid-South Pulmonary & Sleep Specialists P.C. and their customers.

On 02 November 2023, Mid-South Pulmonary & Sleep Specialists (MSPSS) disclosed Data Breach issues under the banner "Mid-South Pulmonary & Sleep Specialists Data Breach Exposes Sensitive Patient Information".

On or around November 2, Mid-South Pulmonary & Sleep Specialists (MSPSS) detected suspicious activity within its network, prompting an investigation with third-party forensic experts.

The disruption is felt across the environment, and exposing Sensitive patient data, including names, addresses, dates of birth, Social Security numbers, health insurance details, and medical diagnoses.

In response, and stakeholders are being briefed through Will notify affected individuals once review is complete.

The case underscores how Ongoing, with advisories going out to stakeholders covering Will notify affected individuals once review is complete.

Finally, we try to match the incident with the MITRE ATT&CK framework to see if there is any correlation between the incident and the MITRE ATT&CK framework.

The MITRE ATT&CK framework is a knowledge base of techniques and sub-techniques that are used to describe the tactics and procedures of cyber adversaries. It is a powerful tool for understanding the threat landscape and for developing effective defense strategies.