Utah

The University of Utah experienced a data breach when three vendors reported unauthorized network access. That means the cybercriminals could access information belonging to employees, donors, and students. The three vendors were TMG, TIAA Kaspick, and the National Student Clearinghouse. In the first case, TMG reported that 3,900 patient records were accessed, exposing email addresses, phone numbers, birth dates, Social Security numbers, and banking information. The TIAA alerted the university leaders of their data breach, impacting 30 legacy issuing donors and 13,800 students. Their names, dates of birth, and Social Security numbers were exposed. The National Student Clearinghouse also indicated that Social Security numbers, dates of birth, and student identification numbers of an undisclosed number were revealed. All three vendors wrote notification letters to those affected by the breach.

The Utah-based radiology center revealed there was a data breach affecting more than 580,000 individuals. The attack happened in August 2021, when the cybercriminals explored internal systems and stole data from the company for a week. An external cybersecurity organization investigated the incident and found that the exposed data included names, mailing addresses, birth dates, Social Security numbers, health insurance data, and medical data. Utah Imaging Associates also declared that there were no reports of the data being leaked online months after the incident. UIA also provided 12 months of credit monitoring.

In July 2019, Premier Family Medica experienced a data breach that temporarily prevented access to patient information. However, the notice on its website did not illustrate the type of ransomware used or the amount demanded. Premier also did not specify whether they contacted the data breachers or not. The company did engage law enforcement and technical consultants to regain access to its systems. The breach did affect ten county locations, though. According to the chief administrator, Robert Edwards, there was no reason to believe that patient information was taken, and the organization took steps to enhance its security.

In March 2012, unauthorized parties illegally accessed the Utah Department of Technological Services. They stole Medicaid and CHIP claims information of 6,000 patients. This breach happened because of an error on the server during password authentication. It allowed hackers to bypass the security system and access the data. Other information, including names, birth dates, and addresses, were also stored on the server. The victims obtained a letter from the Utah Department of Health. Victims were also advised to monitor their credit and other financial accounts closely.

In June 2010, hackers compromised one of the servers that had radiology reports. There was no evidence to show files were copied from the server, though. Initial investigations also determined that one of the healthcare provider servers was affected. Some of the information that was potentially revealed included names, Social Security addresses, and phone numbers. The breach affected 21,677 patients who were contacted by mail to advise them of the potential data breach. Central Utah Clinic advised all of those affected there was no indication that any personal data was copied or viewed to unauthorized locations. Regardless, patients were offered credit monitoring services to counter any damage caused to their financial accounts.