Supply chain
β Supply Chain
Jamaican Government Third-Party Breach (February 2021)
Primary Source βIncident Details
Jamaica’s immigration website exposed thousands of travelers’ data | TechCrunch. Exclusive: Months of immigration documents and COVID-19 lab results were left on an unprotected server. A security lapse by a Jamaican government contractor has exposed immigration records and COVID-19 test results for hundreds of thousands of travelers who visited the island over the past year. The Jamaican government contracted Amber Group to build the JamCOVID19 website and app, which the government uses to publish daily coronavirus figures and allows residents to self-report their symptoms. The contractor also built the website to pre-approve travel applications to visit the island during the pandemic, a process that requires travelers to upload a negative COVID-19 test result before they board their flight if they come from high-risk countries, including the United States. Third-party company: Amber Group.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Amber Group
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2021-02-01 Breach occurred
- 2021-02-17 Publicly disclosed