Merge pull request #1672 from vz-risk/febupdate

February 2014 data update

data/json/001A011B-8C28-46B9-BA86-186C18213E1A.json

@@ -0,0 +1,68 @@
+{
+  "action": {
+    "error": {
+      "variety": [
+        "Misdelivery"
+      ], 
+      "vector": [
+        "Carelessness"
+      ]
+    }
+  }, 
+  "actor": {
+    "internal": {
+      "motive": [
+        "NA"
+      ], 
+      "variety": [
+        "Unknown"
+      ]
+    }
+  }, 
+  "asset": {
+    "assets": [
+      {
+        "variety": "M - Documents"
+      }
+    ]
+  }, 
+  "attribute": {
+    "confidentiality": {
+      "data": [
+        {
+          "variety": "Unknown"
+        }
+      ], 
+      "data_disclosure": "Yes", 
+      "data_total": 1
+    }
+  }, 
+  "discovery_method": "Unknown", 
+  "incident_id": "001A011B-8C28-46B9-BA86-186C18213E1A", 
+  "plus": {
+    "analysis_status": "First pass", 
+    "analyst": "swidup", 
+    "created": "2014-02-21T04:07:15Z", 
+    "master_id": "001A011B-8C28-46B9-BA86-186C18213E1A", 
+    "modified": "2014-02-21T04:07:15Z"
+  }, 
+  "reference": "VA FOIA", 
+  "schema_version": "1.2.1", 
+  "security_incident": "Confirmed", 
+  "source_id": "vcdb", 
+  "summary": "Veteran A called the pharmacy and reported he had received the prescription of Veteran B. Veteran A stated the address on the mailing envelope was his address\nbut he has never received services at this VA. Veteran A's first and last name are Veteran B's first and middle name.", 
+  "timeline": {
+    "incident": {
+      "day": 18, 
+      "month": 1, 
+      "year": 2013
+    }
+  }, 
+  "victim": {
+    "country": "US", 
+    "employee_count": "Over 100000", 
+    "industry": "561990", 
+    "state": "TX", 
+    "victim_id": "United States Department of Veterans Affairs"
+  }
+}

data/json/00EF0132-EE8B-4DD2-8DBF-624D2633F598.json

@@ -0,0 +1,92 @@
+{
+  "action": {
+    "error": {
+      "variety": [
+        "Disposal error"
+      ],
+      "vector": [
+        "Inadequate processes"
+      ]
+    }
+  },
+  "actor": {
+    "partner": {
+      "country": [
+        "GB"
+      ],
+      "industry": "52",
+      "motive": [
+        "NA"
+      ],
+      "notes": "Eastern and Coastal Kent Primary Care Trust"
+    }
+  },
+  "asset": {
+    "accessibility": "NA",
+    "assets": [
+      {
+        "variety": "M - Disk media"
+      }
+    ],
+    "hosting": "NA",
+    "management": "NA",
+    "ownership": "Victim"
+  },
+  "attribute": {
+    "confidentiality": {
+      "data": [
+        {
+          "amount": 1600000,
+          "variety": "Personal"
+        }
+      ],
+      "data_disclosure": "Potentially",
+      "data_total": 1600000,
+      "state": [
+        "Stored unencrypted"
+      ]
+    }
+  },
+  "discovery_method": "Ext - actor disclosure",
+  "impact": {
+    "overall_rating": "Unknown"
+  },
+  "incident_id": "00EF0132-EE8B-4DD2-8DBF-624D2633F598",
+  "plus": {
+    "analysis_status": "First pass",
+    "analyst": "blackfist",
+    "attribute": {
+      "confidentiality": {
+        "credit_monitoring": "U",
+        "data_subject": "Patient"
+      }
+    },
+    "created": "2014-02-16T16:36:26Z",
+    "github": "1633",
+    "master_id": "00EF0132-EE8B-4DD2-8DBF-624D2633F598",
+    "modified": "2014-02-16T16:36:26Z",
+    "timeline": {
+      "notification": {
+        "day": 16,
+        "month": 9,
+        "year": 2011
+      }
+    }
+  },
+  "reference": "http://www.independent.co.uk/life-style/health-and-families/health-news/nhs-trust-sends-data-cd-to-landfill-2355834.html (20140216)",
+  "schema_version": "1.2.1",
+  "security_incident": "Confirmed",
+  "source_id": "vcdb",
+  "summary": "Partner throws away customer data.",
+  "timeline": {
+    "incident": {
+      "year": 2011
+    }
+  },
+  "victim": {
+    "country": "GB",
+    "employee_count": "Over 100000",
+    "industry": "524114",
+    "victim_id": "UK National Health Service"
+  }
+}

data/json/010DF8F5-3FAC-4C67-B220-A814CCE64D2F.json

@@ -0,0 +1,68 @@
+{
+  "action": {
+    "misuse": {
+      "variety": [
+        "Privilege abuse"
+      ], 
+      "vector": [
+        "LAN access"
+      ]
+    }
+  }, 
+  "actor": {
+    "internal": {
+      "motive": [
+        "Unknown"
+      ], 
+      "variety": [
+        "Unknown"
+      ]
+    }
+  }, 
+  "asset": {
+    "assets": [
+      {
+        "variety": "U - Desktop"
+      }
+    ]
+  }, 
+  "attribute": {
+    "confidentiality": {
+      "data": [
+        {
+          "variety": "Unknown"
+        }
+      ], 
+      "data_disclosure": "Yes", 
+      "data_total": 2
+    }
+  }, 
+  "discovery_method": "Unknown", 
+  "incident_id": "010DF8F5-3FAC-4C67-B220-A814CCE64D2F", 
+  "plus": {
+    "analysis_status": "First pass", 
+    "analyst": "swidup", 
+    "created": "2014-02-21T04:07:15Z", 
+    "master_id": "010DF8F5-3FAC-4C67-B220-A814CCE64D2F", 
+    "modified": "2014-02-21T04:07:15Z"
+  }, 
+  "reference": "VA FOIA", 
+  "schema_version": "1.2.1", 
+  "security_incident": "Confirmed", 
+  "source_id": "vcdb", 
+  "summary": "Employee A is in dispute about a work performance issue with his supervisors. He emailed patient information to an unauthorized union representative when sending information to his supervisors. The information was not de-identified. This has been going on for a period of time without the supervisors' knowledge. This incident involved 2 patients but since this has happened before and we were unaware, it is unknown how many patients were involved in the past.", 
+  "timeline": {
+    "incident": {
+      "day": 13, 
+      "month": 5, 
+      "year": 2010
+    }
+  }, 
+  "victim": {
+    "country": "US", 
+    "employee_count": "Over 100000", 
+    "industry": "561990", 
+    "state": "AZ", 
+    "victim_id": "United States Department of Veterans Affairs"
+  }
+}

data/json/01C432FA-4671-4E79-96EA-50EA358082A6.json

@@ -0,0 +1,68 @@
+{
+  "action": {
+    "error": {
+      "variety": [
+        "Misdelivery"
+      ], 
+      "vector": [
+        "Carelessness"
+      ]
+    }
+  }, 
+  "actor": {
+    "internal": {
+      "motive": [
+        "NA"
+      ], 
+      "variety": [
+        "Unknown"
+      ]
+    }
+  }, 
+  "asset": {
+    "assets": [
+      {
+        "variety": "M - Documents"
+      }
+    ]
+  }, 
+  "attribute": {
+    "confidentiality": {
+      "data": [
+        {
+          "variety": "Unknown"
+        }
+      ], 
+      "data_disclosure": "Yes", 
+      "data_total": 2
+    }
+  }, 
+  "discovery_method": "Unknown", 
+  "incident_id": "01C432FA-4671-4E79-96EA-50EA358082A6", 
+  "plus": {
+    "analysis_status": "First pass", 
+    "analyst": "swidup", 
+    "created": "2014-02-21T04:07:15Z", 
+    "master_id": "01C432FA-4671-4E79-96EA-50EA358082A6", 
+    "modified": "2014-02-21T04:07:15Z"
+  }, 
+  "reference": "VA FOIA", 
+  "schema_version": "1.2.1", 
+  "security_incident": "Confirmed", 
+  "source_id": "vcdb", 
+  "summary": "Two Veterans were given each other's information. The documents contained the Veterans' full name, full SSN and address. The mistake was noted a few minutes afterwards while the two were still at the clinic.", 
+  "timeline": {
+    "incident": {
+      "day": 16, 
+      "month": 3, 
+      "year": 2012
+    }
+  }, 
+  "victim": {
+    "country": "US", 
+    "employee_count": "Over 100000", 
+    "industry": "561990", 
+    "state": "TX", 
+    "victim_id": "United States Department of Veterans Affairs"
+  }
+}

data/json/02558E0B-13F5-4CA7-91AB-F0DCF7222A8D.json

@@ -70,7 +70,7 @@
     "created": "2013-10-28T06:35:00Z",
     "github": "500",
     "master_id": "02558E0B-13F5-4CA7-91AB-F0DCF7222A8D",
-    "modified": "2013-10-28T06:35:00Z",
+    "modified": "2014-02-05T03:24:47Z",
     "timeline": {
       "notification": {
         "day": 7,
@@ -94,7 +94,7 @@
   "victim": {
     "country": "CA",
     "employee_count": "Unknown",
-    "industry": "0",
+    "industry": "000",
     "victim_id": "Region of Peel"
   }
 }

data/json/02B76CA7-52A8-4684-9C68-1F79859A95A4.json

@@ -0,0 +1,68 @@
+{
+  "action": {
+    "error": {
+      "variety": [
+        "Misdelivery"
+      ], 
+      "vector": [
+        "Carelessness"
+      ]
+    }
+  }, 
+  "actor": {
+    "internal": {
+      "motive": [
+        "NA"
+      ], 
+      "variety": [
+        "Unknown"
+      ]
+    }
+  }, 
+  "asset": {
+    "assets": [
+      {
+        "variety": "M - Documents"
+      }
+    ]
+  }, 
+  "attribute": {
+    "confidentiality": {
+      "data": [
+        {
+          "variety": "Unknown"
+        }
+      ], 
+      "data_disclosure": "Yes", 
+      "data_total": 1
+    }
+  }, 
+  "discovery_method": "Unknown", 
+  "incident_id": "02B76CA7-52A8-4684-9C68-1F79859A95A4", 
+  "plus": {
+    "analysis_status": "First pass", 
+    "analyst": "swidup", 
+    "created": "2014-02-21T04:07:15Z", 
+    "master_id": "02B76CA7-52A8-4684-9C68-1F79859A95A4", 
+    "modified": "2014-02-21T04:07:15Z"
+  }, 
+  "reference": "VA FOIA", 
+  "schema_version": "1.2.1", 
+  "security_incident": "Confirmed", 
+  "source_id": "vcdb", 
+  "summary": "On April 26, 2013, a letter was sent to Veteran A explaining the results of his most recent laboratory tests. The letter includes the language \"...I have included a\ncomplete copy of your most recent blood work....\" However, those laboratory results provided to Veteran A were those of another Veteran. This report included full\nfirst name, full middle name, last name, full social security number, and full date of birth.", 
+  "timeline": {
+    "incident": {
+      "day": 16, 
+      "month": 5, 
+      "year": 2013
+    }
+  }, 
+  "victim": {
+    "country": "US", 
+    "employee_count": "Over 100000", 
+    "industry": "561990", 
+    "state": "ME", 
+    "victim_id": "United States Department of Veterans Affairs"
+  }
+}