Supply chain [SC] Supply Chain

Oklahoma City Police Department Third-Party Breach (February 2022)

2022-02-01 [vendor] DNA Solutions Inc.
Primary Source ↗

Incident Details

OKC Police rape kit info exposed in data breach of DNA contractor. The DNA and personal information of past sexual assault victims were a part of a data breach by a contractor of the Okla City Police Dept. OKLAHOMA CITY ( Free Press ) — Victims of past sexual assault who had their DNA collected in a rape kit by the Oklahoma City Police Department now face yet more uncertainty because of a data breach. Rape kits are used to collect DNA evidence by law enforcement agencies for sexual assault investigations. Third-party company: DNA Solutions Inc..

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
DNA Solutions Inc.
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2022-02-01 Breach occurred
  2. 2022-02-20 Publicly disclosed