Supply chain [SC] Supply Chain

Hospitals in Northern California Third-Party Breach (May 2022)

2022-05-01 [vendor] Partnership HealthPlan of California
Primary Source ↗

Incident Details

Local Class Action Lawsuit Targets Partnership HealthPlan Over ‘Massive Data Breach’ of Personal Info. « While Conducting Aforementioned Drug Bust in Rio Dell, Drug Task Force Agents Spot Hoopa Man Wanted for Suspected Fentanyl Trafficking. OPINION: Puff, Puff, Pass the Blame. Hypocritical Humboldt Hits Chesa Boudin on Drugs (A View from San Francisco) ». Back in March, Partnership HealthPlan of California, a Medi-Cal managed service provider serving close to a million beneficiaries in Northern California, announced on its website that it had been hacked. Third-party company: Partnership HealthPlan of California.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Partnership HealthPlan of California
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2022-05-01 Breach occurred
  2. 2022-05-06 Publicly disclosed