Supply chain β›“ Supply Chain

Hospitals in Northern California Third-Party Breach (May 2022)

πŸ“… 2022-05-01 🏒 Partnership HealthPlan of California
Primary Source β†—

Incident Details

Local Class Action Lawsuit Targets Partnership HealthPlan Over ‘Massive Data Breach’ of Personal Info. Β« While Conducting Aforementioned Drug Bust in Rio Dell, Drug Task Force Agents Spot Hoopa Man Wanted for Suspected Fentanyl Trafficking. OPINION: Puff, Puff, Pass the Blame. Hypocritical Humboldt Hits Chesa Boudin on Drugs (A View from San Francisco) Β». Back in March, Partnership HealthPlan of California, a Medi-Cal managed service provider serving close to a million beneficiaries in Northern California, announced on its website that it had been hacked. Third-party company: Partnership HealthPlan of California.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Partnership HealthPlan of California
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2022-05-01 Breach occurred
  2. 2022-05-06 Publicly disclosed