Supply chain ⛓ Supply Chain

Priority Health Third-Party Breach (June 2022)

📅 2022-06-01 🏢 Warner Norcross & Judd
Primary Source ↗

Incident Details

120K Priority Health Members Impacted By Third-Party Data Breach | TechTarget. Michigan-based health plan Priority Health notified 120,000 individuals of a third-party data breach that originated at the law firm Warner Norcross & Judd. Priority Health issued a notice about a third-party data breach that originated at the law firm Warner Norcross & Judd (WNJ) in October 2021. Priority Health is Michigan’s second-largest health plan and serves more than one million members per year. According to Priority Health’s notice, WNJ discovered unauthorized activity on some of its systems on October 22, 2021. WNJ took steps to secure its network and notified Priority Health of the incident on June 6, 2022. The incident impacted approximately 120,000 Priority Health members. Third-party company: Warner Norcross & Judd.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Warner Norcross & Judd
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2022-06-01 Breach occurred
  2. 2022-08-10 Publicly disclosed