Supply chain
β Supply Chain
UNC Lenoir Health Care, Avera Health, CHI Health, Phelps Health, and 4 organizations Third-Party Breach (March 2022)
Primary Source βIncident Details
MCG Health Data Breach Impacts 8 Organizations, 793K Individuals | TechTarget. About 793,283 individuals and at least 8 organizations were impacted by a third-party data breach stemming from MCG Health. As previously reported, Seattle-based company MCG Health suffered a data breach in March resulting from unauthorized access. The Seattle-based software company provides patient care guidelines to providers and health plans using artificial intelligence and technology solutions. According to a recent entry to the HHS Office for Civil Rights (OCR) data breach portal, the incident impacted 793,283 individuals in total. Since MCG disclosed the breach on June 10, at least eight organizations have come forward and said that they were impacted by the breach. Third-party company: MCG Health.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- MCG Health
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2022-03-01 Breach occurred
- 2022-06-24 Publicly disclosed