Supply chain β›“ Supply Chain

Not disclosed Third-Party Breach (February 2022)

πŸ“… 2022-02-01 🏒 Comprehensive Health Services
Primary Source β†—

Incident Details

2 Vendor Hacking Incidents Affect Over 600,000 Individuals. Two recent hacking breaches affecting hundreds of thousands of individuals - one reported by a firm that provides services to health plans and the other by a. 3rd Party Risk Management , Business Email Compromise (BEC) , Fraud Management & Cybercrime. The breaches involve a 2021 ransomware incident affecting more than 521,000 individuals that was reported to federal and state regulators on Feb. 1 by Michigan-based Morley Companies. Third-party company: Comprehensive Health Services.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Comprehensive Health Services
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2022-02-01 Breach occurred
  2. 2022-02-01 Publicly disclosed