Supply chain [SC] Supply Chain

Rush System for Health Third-Party Breach (March 2019)

2019-03-01 [vendor] MiraMed
Primary Source ↗

Incident Details

Rush data breach exposes 45,000 patients. Patient names, addresses, Social Security numbers, birth dates and health insurance information were compromised, the health system says. The 28-acre parcel, which has been unused since Solo Cup closed its factory in 2008, is set to become the biggest housing development in Highland Park in decades. Third-party company: MiraMed.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
MiraMed
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2019-03-01 Breach occurred
  2. 2019-03-04 Publicly disclosed