Cyber Incident Victim: NorthBay Healthcare Corporation
Date:
Oct 2018
Location:
United States of America
Summary
NorthBay Healthcare Corporation experienced a data breach involving unauthorized access to its third-party employment application management system, Jobscience Inc., compromising applicant information. The exposed data included names, addresses, dates of birth, email addresses, Social Security numbers, and alien registration numbers, posing identity theft risks despite no evidence of misuse. Affected individuals were offered complimentary credit monitoring services, and the organization collaborated with the vendor to implement security enhancements such as forced password resets.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
NorthBay Healthcare Corporation experienced a data breach involving unauthorized access to applicant information managed by its third-party vendor, Jobscience Inc. Jobscience notified NorthBay on October 3, 2018, that an external attacker had compromised its online employment application management system. The breach exposed personally identifiable information (PII) of individuals who applied for positions at NorthBay between December 2012 and May 2018. Compromised data included first and last names, home addresses, dates of birth, email addresses, Social Security numbers, and alien registration numbers. While financial information such as credit card details remained unaffected, the stolen PII created significant identity theft risks. NorthBay confirmed the breach through Jobscience’s forensic investigation but found no evidence of misuse of the exposed data at the time of disclosure.
In response, NorthBay issued breach notifications via a template filed with California’s Office of the Attorney General and provided affected applicants with complimentary one-year subscriptions to Experian’s IdentityWorks Credit 3B service. This offering included credit monitoring, identity theft detection, and resolution support. NorthBay collaborated with Jobscience to implement security enhancements, including forced password resets across affected systems. The organization emphasized remedial measures to prevent recurrence but did not disclose technical specifics of the vendor’s security shortcomings. No legal or operational disruptions beyond the notification and credit monitoring efforts were cited in the public disclosure.