Supply chain
[SC] Supply Chain
Oklahoma City Police Department Third-Party Breach (February 2022)
Primary Source ↗Incident Details
OKC Police rape kit info exposed in data breach of DNA contractor. The DNA and personal information of past sexual assault victims were a part of a data breach by a contractor of the Okla City Police Dept. OKLAHOMA CITY ( Free Press ) — Victims of past sexual assault who had their DNA collected in a rape kit by the Oklahoma City Police Department now face yet more uncertainty because of a data breach. Rape kits are used to collect DNA evidence by law enforcement agencies for sexual assault investigations. Third-party company: DNA Solutions Inc..
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- DNA Solutions Inc.
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2022-02-01 Breach occurred
- 2022-02-20 Publicly disclosed