Supply chain ⛓ Supply Chain

EvergreenHealth Third-Party Breach (May 2022)

📅 2022-05-01 🏢 MyCare
Primary Source ↗

Incident Details

Illinois Gastroenterology Group Data Breach Impacts 228K | TechTarget. Optima Dermatology, EvergreenHealth, and SAC Health also faced healthcare data breaches recently. Illinois Gastroenterology Group (IGG) suffered a data security incident that potentially impacted 227,943 individuals. IGG discovered unusual network activity on October 22, 2021. On November 18, IGG determined that an unauthorized actor had gained access to its systems and that “information contained in those systems may have been viewed or taken.”. The systems contained names, birth dates, Social Security numbers, driver’s license numbers, passport information, financial account information, addresses, payment card information, biometric data, employer-assigned identification numbers, and medical information. Third-party company: MyCare.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
MyCare
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2022-05-01 Breach occurred
  2. 2022-05-09 Publicly disclosed