Supply chain
[SC] Supply Chain
Hospitals in Northern California Third-Party Breach (May 2022)
Primary Source ↗Incident Details
Local Class Action Lawsuit Targets Partnership HealthPlan Over ‘Massive Data Breach’ of Personal Info. « While Conducting Aforementioned Drug Bust in Rio Dell, Drug Task Force Agents Spot Hoopa Man Wanted for Suspected Fentanyl Trafficking. OPINION: Puff, Puff, Pass the Blame. Hypocritical Humboldt Hits Chesa Boudin on Drugs (A View from San Francisco) ». Back in March, Partnership HealthPlan of California, a Medi-Cal managed service provider serving close to a million beneficiaries in Northern California, announced on its website that it had been hacked. Third-party company: Partnership HealthPlan of California.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Partnership HealthPlan of California
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2022-05-01 Breach occurred
- 2022-05-06 Publicly disclosed