Following a large-scale data breach that compromised patient records, a healthcare facility urgently needed data breach response services to identify Protected Health Information (PHI) exposed in the incident. The response to a breach is time sensitive, and two previous vendors failed to deliver effective cyber incident response services due to flawed search techniques.

Challenge

The breached data included hundreds of thousands of low-quality PDFs and images containing extensive PHI, making data breach remediation complex and costly. The healthcare provider required a more accurate and efficient cyber incident response to meet data breach notification and data breach reporting obligations.

Solution

Elevate deployed its data breach services, leveraging advanced data mining cyber incident response techniques. The process combined Canopy’s AI and machine learning technologies with Elevate-customised search terms tailored to the client’s unique needs. This approach addressed the challenge of cyber breach reporting and incident response solutions with precision.

Elevate’s review team sampled thousands of documents across each document type and PII/PHI category. The methodology provided breach response counsel with detailed breakdowns of PHI types and document counts, revealing that most documents contained PHI for multiple individuals. This enabled accurate cyber response planning and execution.

Impact

Small bubble image

90% savings by calibrating the data breach response to Elevate’s targeted approach

Small bubble image

9% reduction in the document set previously flagged for extensive manual review

Small bubble image

Accelerated data breach notification to affected individuals, with breach counsel confirming Elevate’s results justified immediate action

Small bubble image

Avoidance of expensive and time-consuming manual review, thanks to Elevate’s incident response services

Elevate’s post-breach strategy and data breach response capabilities proved critical in minimising the cost of a data breach and ensuring compliance with regulatory requirements.

Contact Us

Bubble