Supply chain
⛓ Supply Chain
Redwood Eye Center Third-Party Breach (December 2018)
Primary Source ↗Incident Details
Microsoft Word - Redwood-AG Notification - California 4848-2006-9506 v.1. > ARIZONA •CALIFORNIA •COLORADO •CONNECTICUT •FLORIDA •GEORGIA •ILLINOIS •INDIANA •KANSAS •KENTUCKY •LOUISIANA •MARYLAND •. > MASSACHUSETTS •MISSOURI •NEVADA •NEW JERSEY •NEW MEXICO •NEW YORK •NORTH CAROLINA •OHIO •OREGON •PENNSYLVANIA •RHODE. We represent Redwood Eye Center (“Redwood”), an ophthalmology practice located in Vallejo,. Third-party company: IT Lighthouse.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- IT Lighthouse
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2018-12-01 Breach occurred
- 2018-12-01 Publicly disclosed