Supply chain
β Supply Chain
Apple Valley Clinic Third-Party Breach (April 2021)
Primary Source βIncident Details
MN: Apple Valley Clinic notifies 157,939 patients about Netgain Technology breach - DataBreaches.Net. In November, 2020, cloud IT services provider Netgain Technology LLC experienced a ransomware attack that resulted in them taking some of their data centers off. In January, Ramsey County notified 8,700 clients of its Family Health Division about the breach. In February, Woodcreek Provider Services notified 207,000 patients, and in March, Sandhills Medical Foundation notified 39,602 patients. And now Apple Valley Clinic is notifying 157,939 patients. MINNEAPOLIS (March 26, 2021) β This notice is regarding a security incident of which the Apple Valley Clinic has become aware. The Apple Valley Clinic provides primary care and urgent care services. The Apple Valley Clinic contracts with Netgain Technology, LLC (Netgain), to host its information technology network and computer systems. Third-party company: Netgain.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Netgain
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2021-04-01 Breach occurred
- 2021-03-30 Publicly disclosed