Supply chain [SC] Supply Chain

Humana Third-Party Breach (January 2019)

2019-01-01 [vendor] LCP Corp.
Primary Source ↗

Incident Details

Humana has notified customers of a third-party security incident that might have exposed some of their personal information. According to a breach notification letter obtained by DataBreaches.net, the for-profit American health insurance company learned on 25 October 2018 that bad actors had gained access to the system credentials of some employees at Bankers Life, one … Read More The post Humana Informs Customers of Third-Party Security Incident appeared first on The State of Security. Home » Cybersecurity » Data Security » Humana Informs Customers of Third-Party Security Incident. Third-party company: LCP Corp..

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
LCP Corp.
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2019-01-01 Breach occurred
  2. 2019-01-09 Publicly disclosed