[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2szwl7hl2nk8r":3,"$f3u62al4jz7dmu":82},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":19,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":21,"affectedCountUnit":22,"hasEnglishDescription":4,"contentLocale":23,"availableLocales":24,"translations":34,"severity":45,"dataClasses":46,"description":72,"seoTitle":73,"seoDescription":74,"logoUrl":75,"isVerified":4,"isSensitive":4,"isSpamList":76,"isMalware":76,"company":77},"6a66d1e055bae003f0193e14","ErieFamilyHealthCenters2025","Erie Family Health Centers 2025年数据泄露事件","erie-family-health-centers-2025","eriefamilyhealth.org","2025-12-10T00:00:00.000Z","2026-07-27T03:34:56.857Z","2026-10-09T21:59:27.096Z","Confirmed unauthorized network access involving files containing personal and protected health information","https:\u002F\u002Fwww.eriefamilyhealth.org\u002Fnotification\u002F",[15,17,18],"https:\u002F\u002Focrportal.hhs.gov\u002Focr\u002Fbreach\u002Fbreach_report.jsf","https:\u002F\u002Fwww.hipaajournal.com\u002Ferie-family-health-centers-data-breach\u002F",570000,"known",null,"unknown","zh",[25,26,23,27,28,29,30,31,32,33],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":35,"tr":36,"zh":37,"hi":38,"es":39,"ar":40,"fr":41,"bn":42,"pt":43,"ru":44},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"High",[47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71],"Names","Physical addresses","Telephone numbers","Email addresses","Dates of birth","Social Security numbers","Driver’s license and state ID numbers","Taxpayer identification numbers","Passport numbers","Financial account information","Payment card information","Online account credentials","Digital signatures","Biometric data","Medical treatment and diagnosis information","Prescription information","Dates of service","Patient IDs","Encounter IDs","Provider names","Patient account numbers","Medical record numbers","Medicare and Medicaid numbers","Health insurance information","Treatment cost information","\u003Cp>\u003Cstrong>Erie Family Health Centers 2025年数据泄露事件\u003C\u002Fstrong>涉及未经授权的第三方于2025年12月10日访问这家位于芝加哥的医疗中心机构的系统，并持续保有访问权限直至2026年1月27日。美国卫生与公众服务部民权办公室目前维护的数据泄露记录显示，570,000人受到影响。\u003C\u002Fp>\n\u003Cp>Erie由多家医疗中心组成，提供初级医疗、牙科和行为健康服务，不因患者的支付能力而区别对待。此次事件涉及身份、联系方式、财务、账户、生物识别、医疗和保险信息；各人的文件所含信息并不相同。\u003C\u002Fp>\n\u003Ch2>数据泄露是如何得到确认的？\u003C\u002Fh2>\n\u003Cp>Erie于2026年1月27日发现部分网络系统可能遭到未经授权的访问，随后与外部专家共同展开调查。取证审查确认，其网络在12月10日至1月27日期间遭到未经授权的访问。该机构向执法部门报告了此次事件，对系统采取了安全措施，并审查了可能受到影响的数据。\u003C\u002Fp>\n\u003Cp>HHS OCR将此次事件归类为“黑客攻击\u002FIT事件”，将信息存储位置列为“网络服务器”，并将机构类型列为“医疗服务提供者”。HIPAA Journal对比了官方通知与联邦记录，印证了未经授权的访问时段、涉及570,000人的影响范围以及文件类别。\u003C\u002Fp>\n\u003Ch2>未经授权的访问与通知分别发生在何时？\u003C\u002Fh2>\n\u003Cp>事件发生日期以公开来源中可核实的最早技术活动为依据。未经授权的第三方可能在网络中停留了约七周，Erie于1月27日发现并终止了其访问。发现日期与起始日期不同，标题中的年份依据的是2025年首次发生的访问。\u003C\u002Fp>\n\u003Cp>审查文件内容后，该机构开始向受影响人员邮寄通知。HHS记录中的该条目注明的提交日期为2026年3月27日；HIPAA Journal于5月刊载了联邦记录中的总人数和披露的数据类别。Erie表示，已加强网络安全，以帮助防止类似事件再次发生，并在调查期间与执法部门合作。\u003C\u002Fp>\n\u003Ch2>哪些身份和联系方式信息受到影响？\u003C\u002Fh2>\n\u003Cp>可能涉及的身份信息字段包括姓名、实际地址、电话号码、电子邮箱地址和出生日期。更敏感的身份标识信息包括社会安全号码、驾驶执照号码或州身份证号码、纳税人识别号码以及护照号码。披露内容并未说明每个人的文件中都包含全部类别，因此，这份清单不能确定任何个人实际受到影响的信息范围。\u003C\u002Fp>\n\u003Cp>这些字段单独使用或组合使用，都可能被用于欺诈性开户、税务欺诈和定向网络钓鱼。将联系方式与医疗背景信息结合，可能让冒充医疗机构的虚假消息更具迷惑性。来源未提及有哪个威胁团伙声称对此次事件负责。\u003C\u002Fp>\n\u003Ch2>涉及哪些财务、账户和生物识别数据？\u003C\u002Fh2>\n\u003Cp>可能涉及金融账户信息和支付卡信息。在线账户凭据、数字签名和生物识别数据也属于受影响文件中可能包含的数据类别。\u003C\u002Fp>\n\u003Cp>密码可以更改，而数字签名和生物特征可能带来更长期的风险。通知中列有支付卡或金融账户信息的人员应及时报告不明交易；涉及在线账户凭据的人员应为各账户设置不同的密码，并启用多因素身份验证。这些预防措施并不意味着每位受影响人员的文件中都包含上述全部字段。\u003C\u002Fp>\n\u003Ch2>哪些健康和保险信息受到影响？\u003C\u002Fh2>\n\u003Cp>涉及的医疗信息包括治疗或诊断信息、处方信息、服务日期、患者及就诊标识符、医疗服务提供者姓名或名称、患者账户号码和病历号码。Medicare或Medicaid号码、健康保险信息及治疗费用信息也属于已披露的数据类别。这类数据可能带来医疗身份盗用、虚假理赔和隐私风险。\u003C\u002Fp>\n\u003Cp>官方来源公布的受影响人数或记录数量，代表此次事件报告的影响范围，并不意味着每个人都涉及全部已披露的数据类别。该数值未按数据类别拆分，也不应分别套用于每个字段。\u003C\u002Fp>\n\u003Ch2>受影响人员应采取哪些措施？\u003C\u002Fh2>\n\u003Cp>Erie为受影响人员提供了免费的信用监测和身份保护服务，并设立了专门的呼叫中心来解答疑问。收到通知的人员应按照信中的说明注册服务，检查信用报告、金融账户及支付卡的交易活动；如果涉及社会安全号码，还应考虑设置欺诈警示或安全冻结。\u003C\u002Fp>\n\u003Cp>受影响人员还应检查健康保险费用说明、处方记录和患者账户，留意不熟悉的服务、医疗服务提供者、费用或理赔。如果突然收到以Erie名义提出的付款请求、索取密码的请求或身份验证请求，应通过已知的官方渠道核实。\u003C\u002Fp>","Erie Family Health Centers 2025年数据泄露事件 (570 千 已报告记录数)","Erie Family Health Centers 2025年数据泄露事件. 据报告，涉及570 千条记录。 已报告的数据：姓名, 实际地址, 电话号码。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Feriefamilyhealth_org.png",false,{"name":78,"sector":79,"country":80,"website":10,"websiteArchiveUrl":81,"websiteStatus":81,"websiteCheckedAt":21},"Erie Family Health Centers","Healthcare","United States","",{"success":4,"breaches":83},[84,91,99,106],{"slug":85,"title":86,"companyName":87,"logoUrl":88,"breachDate":89,"affectedCount":90,"affectedCountStatus":20},"mckesson-2026-data-breach","McKesson 2026年数据泄露事件","McKesson Corporation","\u002Fuploads\u002Flogo\u002Fmckesson-2026-veri-ihlali-d674ebb05120.webp","2026-08-20T00:00:00.000Z",1700377,{"slug":92,"title":93,"companyName":94,"logoUrl":95,"breachDate":96,"affectedCount":97,"affectedCountStatus":98},"medical-express-psi-2026","Medical Express PSI 数据泄露（870+人受影响）","PSI Premier Specialties Inc. d\u002Fb\u002Fa Medical Express PSI","\u002Fuploads\u002Flogo\u002Fmedical-express-psi.png","2026-07-28T00:00:00.000Z",870,"lower_bound",{"slug":100,"title":101,"companyName":102,"logoUrl":103,"breachDate":104,"affectedCount":21,"affectedCountStatus":105},"clover-health-2026","Clover Health 2026 年数据泄露事件","Clover Health Investments, Corp.","\u002Fuploads\u002Flogo\u002Fcloverhealth_com.png","2026-07-04T00:00:00.000Z","not_disclosed",{"slug":107,"title":108,"companyName":109,"logoUrl":110,"breachDate":111,"affectedCount":21,"affectedCountStatus":105},"amgen-2026","Amgen 2026 数据泄露事件","Amgen Inc.","\u002Fuploads\u002Flogo\u002Famgen-2026.webp","2026-07-01T00:00:00.000Z"]