Skip to content

Commit de91353

Browse files
committed
Merge pull request #1672 from vz-risk/febupdate
February 2014 data update
2 parents d6d27a0 + 4c676a9 commit de91353

File tree

610 files changed

+54951
-4364
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

610 files changed

+54951
-4364
lines changed

data/csv/vcdb.csv

Lines changed: 3223 additions & 2483 deletions
Large diffs are not rendered by default.
Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"action": {
3+
"error": {
4+
"variety": [
5+
"Misdelivery"
6+
],
7+
"vector": [
8+
"Carelessness"
9+
]
10+
}
11+
},
12+
"actor": {
13+
"internal": {
14+
"motive": [
15+
"NA"
16+
],
17+
"variety": [
18+
"Unknown"
19+
]
20+
}
21+
},
22+
"asset": {
23+
"assets": [
24+
{
25+
"variety": "M - Documents"
26+
}
27+
]
28+
},
29+
"attribute": {
30+
"confidentiality": {
31+
"data": [
32+
{
33+
"variety": "Unknown"
34+
}
35+
],
36+
"data_disclosure": "Yes",
37+
"data_total": 1
38+
}
39+
},
40+
"discovery_method": "Unknown",
41+
"incident_id": "001A011B-8C28-46B9-BA86-186C18213E1A",
42+
"plus": {
43+
"analysis_status": "First pass",
44+
"analyst": "swidup",
45+
"created": "2014-02-21T04:07:15Z",
46+
"master_id": "001A011B-8C28-46B9-BA86-186C18213E1A",
47+
"modified": "2014-02-21T04:07:15Z"
48+
},
49+
"reference": "VA FOIA",
50+
"schema_version": "1.2.1",
51+
"security_incident": "Confirmed",
52+
"source_id": "vcdb",
53+
"summary": "Veteran A called the pharmacy and reported he had received the prescription of Veteran B. Veteran A stated the address on the mailing envelope was his address\nbut he has never received services at this VA. Veteran A's first and last name are Veteran B's first and middle name.",
54+
"timeline": {
55+
"incident": {
56+
"day": 18,
57+
"month": 1,
58+
"year": 2013
59+
}
60+
},
61+
"victim": {
62+
"country": "US",
63+
"employee_count": "Over 100000",
64+
"industry": "561990",
65+
"state": "TX",
66+
"victim_id": "United States Department of Veterans Affairs"
67+
}
68+
}
Lines changed: 92 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,92 @@
1+
{
2+
"action": {
3+
"error": {
4+
"variety": [
5+
"Disposal error"
6+
],
7+
"vector": [
8+
"Inadequate processes"
9+
]
10+
}
11+
},
12+
"actor": {
13+
"partner": {
14+
"country": [
15+
"GB"
16+
],
17+
"industry": "52",
18+
"motive": [
19+
"NA"
20+
],
21+
"notes": "Eastern and Coastal Kent Primary Care Trust"
22+
}
23+
},
24+
"asset": {
25+
"accessibility": "NA",
26+
"assets": [
27+
{
28+
"variety": "M - Disk media"
29+
}
30+
],
31+
"hosting": "NA",
32+
"management": "NA",
33+
"ownership": "Victim"
34+
},
35+
"attribute": {
36+
"confidentiality": {
37+
"data": [
38+
{
39+
"amount": 1600000,
40+
"variety": "Personal"
41+
}
42+
],
43+
"data_disclosure": "Potentially",
44+
"data_total": 1600000,
45+
"state": [
46+
"Stored unencrypted"
47+
]
48+
}
49+
},
50+
"discovery_method": "Ext - actor disclosure",
51+
"impact": {
52+
"overall_rating": "Unknown"
53+
},
54+
"incident_id": "00EF0132-EE8B-4DD2-8DBF-624D2633F598",
55+
"plus": {
56+
"analysis_status": "First pass",
57+
"analyst": "blackfist",
58+
"attribute": {
59+
"confidentiality": {
60+
"credit_monitoring": "U",
61+
"data_subject": "Patient"
62+
}
63+
},
64+
"created": "2014-02-16T16:36:26Z",
65+
"github": "1633",
66+
"master_id": "00EF0132-EE8B-4DD2-8DBF-624D2633F598",
67+
"modified": "2014-02-16T16:36:26Z",
68+
"timeline": {
69+
"notification": {
70+
"day": 16,
71+
"month": 9,
72+
"year": 2011
73+
}
74+
}
75+
},
76+
"reference": "http://www.independent.co.uk/life-style/health-and-families/health-news/nhs-trust-sends-data-cd-to-landfill-2355834.html (20140216)",
77+
"schema_version": "1.2.1",
78+
"security_incident": "Confirmed",
79+
"source_id": "vcdb",
80+
"summary": "Partner throws away customer data.",
81+
"timeline": {
82+
"incident": {
83+
"year": 2011
84+
}
85+
},
86+
"victim": {
87+
"country": "GB",
88+
"employee_count": "Over 100000",
89+
"industry": "524114",
90+
"victim_id": "UK National Health Service"
91+
}
92+
}
Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"action": {
3+
"misuse": {
4+
"variety": [
5+
"Privilege abuse"
6+
],
7+
"vector": [
8+
"LAN access"
9+
]
10+
}
11+
},
12+
"actor": {
13+
"internal": {
14+
"motive": [
15+
"Unknown"
16+
],
17+
"variety": [
18+
"Unknown"
19+
]
20+
}
21+
},
22+
"asset": {
23+
"assets": [
24+
{
25+
"variety": "U - Desktop"
26+
}
27+
]
28+
},
29+
"attribute": {
30+
"confidentiality": {
31+
"data": [
32+
{
33+
"variety": "Unknown"
34+
}
35+
],
36+
"data_disclosure": "Yes",
37+
"data_total": 2
38+
}
39+
},
40+
"discovery_method": "Unknown",
41+
"incident_id": "010DF8F5-3FAC-4C67-B220-A814CCE64D2F",
42+
"plus": {
43+
"analysis_status": "First pass",
44+
"analyst": "swidup",
45+
"created": "2014-02-21T04:07:15Z",
46+
"master_id": "010DF8F5-3FAC-4C67-B220-A814CCE64D2F",
47+
"modified": "2014-02-21T04:07:15Z"
48+
},
49+
"reference": "VA FOIA",
50+
"schema_version": "1.2.1",
51+
"security_incident": "Confirmed",
52+
"source_id": "vcdb",
53+
"summary": "Employee A is in dispute about a work performance issue with his supervisors. He emailed patient information to an unauthorized union representative when sending information to his supervisors. The information was not de-identified. This has been going on for a period of time without the supervisors' knowledge. This incident involved 2 patients but since this has happened before and we were unaware, it is unknown how many patients were involved in the past.",
54+
"timeline": {
55+
"incident": {
56+
"day": 13,
57+
"month": 5,
58+
"year": 2010
59+
}
60+
},
61+
"victim": {
62+
"country": "US",
63+
"employee_count": "Over 100000",
64+
"industry": "561990",
65+
"state": "AZ",
66+
"victim_id": "United States Department of Veterans Affairs"
67+
}
68+
}
Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"action": {
3+
"error": {
4+
"variety": [
5+
"Misdelivery"
6+
],
7+
"vector": [
8+
"Carelessness"
9+
]
10+
}
11+
},
12+
"actor": {
13+
"internal": {
14+
"motive": [
15+
"NA"
16+
],
17+
"variety": [
18+
"Unknown"
19+
]
20+
}
21+
},
22+
"asset": {
23+
"assets": [
24+
{
25+
"variety": "M - Documents"
26+
}
27+
]
28+
},
29+
"attribute": {
30+
"confidentiality": {
31+
"data": [
32+
{
33+
"variety": "Unknown"
34+
}
35+
],
36+
"data_disclosure": "Yes",
37+
"data_total": 2
38+
}
39+
},
40+
"discovery_method": "Unknown",
41+
"incident_id": "01C432FA-4671-4E79-96EA-50EA358082A6",
42+
"plus": {
43+
"analysis_status": "First pass",
44+
"analyst": "swidup",
45+
"created": "2014-02-21T04:07:15Z",
46+
"master_id": "01C432FA-4671-4E79-96EA-50EA358082A6",
47+
"modified": "2014-02-21T04:07:15Z"
48+
},
49+
"reference": "VA FOIA",
50+
"schema_version": "1.2.1",
51+
"security_incident": "Confirmed",
52+
"source_id": "vcdb",
53+
"summary": "Two Veterans were given each other's information. The documents contained the Veterans' full name, full SSN and address. The mistake was noted a few minutes afterwards while the two were still at the clinic.",
54+
"timeline": {
55+
"incident": {
56+
"day": 16,
57+
"month": 3,
58+
"year": 2012
59+
}
60+
},
61+
"victim": {
62+
"country": "US",
63+
"employee_count": "Over 100000",
64+
"industry": "561990",
65+
"state": "TX",
66+
"victim_id": "United States Department of Veterans Affairs"
67+
}
68+
}

data/json/02558E0B-13F5-4CA7-91AB-F0DCF7222A8D.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@
7070
"created": "2013-10-28T06:35:00Z",
7171
"github": "500",
7272
"master_id": "02558E0B-13F5-4CA7-91AB-F0DCF7222A8D",
73-
"modified": "2013-10-28T06:35:00Z",
73+
"modified": "2014-02-05T03:24:47Z",
7474
"timeline": {
7575
"notification": {
7676
"day": 7,
@@ -94,7 +94,7 @@
9494
"victim": {
9595
"country": "CA",
9696
"employee_count": "Unknown",
97-
"industry": "0",
97+
"industry": "000",
9898
"victim_id": "Region of Peel"
9999
}
100100
}
Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"action": {
3+
"error": {
4+
"variety": [
5+
"Misdelivery"
6+
],
7+
"vector": [
8+
"Carelessness"
9+
]
10+
}
11+
},
12+
"actor": {
13+
"internal": {
14+
"motive": [
15+
"NA"
16+
],
17+
"variety": [
18+
"Unknown"
19+
]
20+
}
21+
},
22+
"asset": {
23+
"assets": [
24+
{
25+
"variety": "M - Documents"
26+
}
27+
]
28+
},
29+
"attribute": {
30+
"confidentiality": {
31+
"data": [
32+
{
33+
"variety": "Unknown"
34+
}
35+
],
36+
"data_disclosure": "Yes",
37+
"data_total": 1
38+
}
39+
},
40+
"discovery_method": "Unknown",
41+
"incident_id": "02B76CA7-52A8-4684-9C68-1F79859A95A4",
42+
"plus": {
43+
"analysis_status": "First pass",
44+
"analyst": "swidup",
45+
"created": "2014-02-21T04:07:15Z",
46+
"master_id": "02B76CA7-52A8-4684-9C68-1F79859A95A4",
47+
"modified": "2014-02-21T04:07:15Z"
48+
},
49+
"reference": "VA FOIA",
50+
"schema_version": "1.2.1",
51+
"security_incident": "Confirmed",
52+
"source_id": "vcdb",
53+
"summary": "On April 26, 2013, a letter was sent to Veteran A explaining the results of his most recent laboratory tests. The letter includes the language \"...I have included a\ncomplete copy of your most recent blood work....\" However, those laboratory results provided to Veteran A were those of another Veteran. This report included full\nfirst name, full middle name, last name, full social security number, and full date of birth.",
54+
"timeline": {
55+
"incident": {
56+
"day": 16,
57+
"month": 5,
58+
"year": 2013
59+
}
60+
},
61+
"victim": {
62+
"country": "US",
63+
"employee_count": "Over 100000",
64+
"industry": "561990",
65+
"state": "ME",
66+
"victim_id": "United States Department of Veterans Affairs"
67+
}
68+
}

0 commit comments

Comments
 (0)