Cybersecurity incident — 2020-06-24 00:00:00
Affected organization: Mercy Iowa City
Affected country: United States of America
Industry: Health Care and Social Assistance
Event type: Mixed
Event subtype: Exploitation of Application Server,Internal Denial of Service
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Mercy Iowa City notifies its patients of a data breach that occurred in the spring after an employee's email account was compromised and exposed the information of 92,795 people. The hacker reportedly used the compromised email account to send spam and phishing emails.