Supply chain β›“ Supply Chain

MNS' Healthcare Clients Third-Party Breach (May 2020)

πŸ“… 2020-05-01 🏒 Management and Network Services – MNS
Primary Source β†—

Incident Details

Management and Network Services Notifies 30,132 Patients About PHI Breach. Management and Network Services has discovered multiple email accounts have been compromised. The PHI of 30,132 patients has been exposed. Management and Network Services (MNS), LLC, a Dublin, OH-based provider of administrative support services to post-acute healthcare providers, has discovered the email accounts of some of its employees have been compromised. In a May 4, 2020 breach notification letter, MNS explained that it learned on or around August 21, 2019 that several employee email accounts had been subjected to unauthorized access between April and July of 2019. The analysis of the email accounts recently revealed five accounts contained the protected health information of patients of its clients. Third-party company: Management and Network Services – MNS.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Management and Network Services – MNS
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2020-05-01 Breach occurred
  2. 2020-05-15 Publicly disclosed