Supply chain β›“ Supply Chain

Florida Blue Third-Party Breach (November 2019)

πŸ“… 2019-11-01 🏒 Magellan Health Inc
Primary Source β†—

Incident Details

Data breach put thousands of Florida Blue members’ personal information at risk. A data breach at Magellan Health Inc. has put the personal information of Florida Blue members at risk, the company announced Friday. Florida Blue says “less than 1 percent” of its approximately 5 million members were affected. The breach, which reportedly occurred on May 28, was traced back to an employee who handles the healthcare provider’s member data. Magellan believes the employee’s email was hacked in a phishing scam. In doing so, numerous personal identifiers including the members’ names, dates of birth and prescriptions might’ve been accessed. Third-party company: Magellan Health Inc.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Magellan Health Inc
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2019-11-01 Breach occurred
  2. 2019-11-09 Publicly disclosed