Supply chain β›“ Supply Chain

Jamaican Government Third-Party Breach (February 2021)

πŸ“… 2021-02-01 🏒 Amber Group
Primary Source β†—

Incident Details

Jamaica’s immigration website exposed thousands of travelers’ data | TechCrunch. Exclusive: Months of immigration documents and COVID-19 lab results were left on an unprotected server. A security lapse by a Jamaican government contractor has exposed immigration records and COVID-19 test results for hundreds of thousands of travelers who visited the island over the past year. The Jamaican government contracted Amber Group to build the JamCOVID19 website and app, which the government uses to publish daily coronavirus figures and allows residents to self-report their symptoms. The contractor also built the website to pre-approve travel applications to visit the island during the pandemic, a process that requires travelers to upload a negative COVID-19 test result before they board their flight if they come from high-risk countries, including the United States. Third-party company: Amber Group.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Amber Group
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2021-02-01 Breach occurred
  2. 2021-02-17 Publicly disclosed