Supply chain
⛓ Supply Chain
Priority Health Third-Party Breach (June 2022)
Primary Source ↗Incident Details
120K Priority Health Members Impacted By Third-Party Data Breach | TechTarget. Michigan-based health plan Priority Health notified 120,000 individuals of a third-party data breach that originated at the law firm Warner Norcross & Judd. Priority Health issued a notice about a third-party data breach that originated at the law firm Warner Norcross & Judd (WNJ) in October 2021. Priority Health is Michigan’s second-largest health plan and serves more than one million members per year. According to Priority Health’s notice, WNJ discovered unauthorized activity on some of its systems on October 22, 2021. WNJ took steps to secure its network and notified Priority Health of the incident on June 6, 2022. The incident impacted approximately 120,000 Priority Health members. Third-party company: Warner Norcross & Judd.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Warner Norcross & Judd
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2022-06-01 Breach occurred
- 2022-08-10 Publicly disclosed