Supply chain
β Supply Chain
Florida Blue Third-Party Breach (November 2019)
Primary Source βIncident Details
Data breach put thousands of Florida Blue members’ personal information at risk. A data breach at Magellan Health Inc. has put the personal information of Florida Blue members at risk, the company announced Friday. Florida Blue says “less than 1 percent” of its approximately 5 million members were affected. The breach, which reportedly occurred on May 28, was traced back to an employee who handles the healthcare provider’s member data. Magellan believes the employee’s email was hacked in a phishing scam. In doing so, numerous personal identifiers including the members’ names, dates of birth and prescriptions might’ve been accessed. Third-party company: Magellan Health Inc.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Magellan Health Inc
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2019-11-01 Breach occurred
- 2019-11-09 Publicly disclosed