Supply chain
β Supply Chain
MNS' Healthcare Clients Third-Party Breach (May 2020)
Primary Source βIncident Details
Management and Network Services Notifies 30,132 Patients About PHI Breach. Management and Network Services has discovered multiple email accounts have been compromised. The PHI of 30,132 patients has been exposed. Management and Network Services (MNS), LLC, a Dublin, OH-based provider of administrative support services to post-acute healthcare providers, has discovered the email accounts of some of its employees have been compromised. In a May 4, 2020 breach notification letter, MNS explained that it learned on or around August 21, 2019 that several employee email accounts had been subjected to unauthorized access between April and July of 2019. The analysis of the email accounts recently revealed five accounts contained the protected health information of patients of its clients. Third-party company: Management and Network Services β MNS.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Management and Network Services β MNS
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2020-05-01 Breach occurred
- 2020-05-15 Publicly disclosed