Supply chain ⛓ Supply Chain

Brunswick County Schools Third-Party Breach (February 2020)

📅 2020-02-01 🏢 Interactive Medical Systems Corporation
Primary Source ↗

Incident Details

Data breach potentially impacts hundreds of Brunswick County Schools employees - WWAYTV3. The company that administers the Flexible Spending Account plans for Brunswick County Schools had a data breach, which means hundreds of school employees may be affected. BRUNSWICK COUNTY, NC (WWAY) — The company that administers the Flexible Spending Account plans for Brunswick County Schools had a data breach, which means hundreds of school employees may be affected. Interactive Medical Systems Corporation is the third-party company that administers the employee benefit plan. The company noticed an IMS employee’s email account was the victim of a phishing attack on December 31. Third-party company: Interactive Medical Systems Corporation.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Interactive Medical Systems Corporation
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2020-02-01 Breach occurred
  2. 2020-02-28 Publicly disclosed