Supply chain
β Supply Chain
Not disclosed Third-Party Breach (February 2022)
Primary Source βIncident Details
2 Vendor Hacking Incidents Affect Over 600,000 Individuals. Two recent hacking breaches affecting hundreds of thousands of individuals - one reported by a firm that provides services to health plans and the other by a. 3rd Party Risk Management , Business Email Compromise (BEC) , Fraud Management & Cybercrime. The breaches involve a 2021 ransomware incident affecting more than 521,000 individuals that was reported to federal and state regulators on Feb. 1 by Michigan-based Morley Companies. Third-party company: Comprehensive Health Services.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Comprehensive Health Services
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2022-02-01 Breach occurred
- 2022-02-01 Publicly disclosed