Supply chain
⛓ Supply Chain
Brunswick County Schools Third-Party Breach (February 2020)
Primary Source ↗Incident Details
Data breach potentially impacts hundreds of Brunswick County Schools employees - WWAYTV3. The company that administers the Flexible Spending Account plans for Brunswick County Schools had a data breach, which means hundreds of school employees may be affected. BRUNSWICK COUNTY, NC (WWAY) — The company that administers the Flexible Spending Account plans for Brunswick County Schools had a data breach, which means hundreds of school employees may be affected. Interactive Medical Systems Corporation is the third-party company that administers the employee benefit plan. The company noticed an IMS employee’s email account was the victim of a phishing attack on December 31. Third-party company: Interactive Medical Systems Corporation.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Interactive Medical Systems Corporation
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2020-02-01 Breach occurred
- 2020-02-28 Publicly disclosed