Supply chain β›“ Supply Chain

Apple Valley Clinic Third-Party Breach (April 2021)

πŸ“… 2021-04-01 🏒 Netgain
Primary Source β†—

Incident Details

MN: Apple Valley Clinic notifies 157,939 patients about Netgain Technology breach - DataBreaches.Net. In November, 2020, cloud IT services provider Netgain Technology LLC experienced a ransomware attack that resulted in them taking some of their data centers off. In January, Ramsey County notified 8,700 clients of its Family Health Division about the breach. In February, Woodcreek Provider Services notified 207,000 patients, and in March, Sandhills Medical Foundation notified 39,602 patients. And now Apple Valley Clinic is notifying 157,939 patients. MINNEAPOLIS (March 26, 2021) β€” This notice is regarding a security incident of which the Apple Valley Clinic has become aware. The Apple Valley Clinic provides primary care and urgent care services. The Apple Valley Clinic contracts with Netgain Technology, LLC (Netgain), to host its information technology network and computer systems. Third-party company: Netgain.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Netgain
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2021-04-01 Breach occurred
  2. 2021-03-30 Publicly disclosed