Supply chain
⛓ Supply Chain
Anthem MaineHealth Third-Party Breach (September 2022)
Primary Source ↗Incident Details
Anthem MaineHealth Reports Third Party Data Breach Related to Incident at Choice Health | JD Supra. On September 30, 2022, Anthem MaineHealth (“AMH Health”) filed an official notice of a data breach with the Office of the Maine Attorney General after. The available information regarding the Anthem MaineHealth / Choice Health breach comes from the company’s filing with the Office of the Maine Attorney General. According to this source, AMH Health was contacted by Choice Health on August 5, 2022, regarding a data breach affecting AMH Health patients that occurred on May 7, 2022. Evidently, on May 14, 2022, Choice Health was informed that an unauthorized party was offering data that was allegedly stolen from the Choice Health network. In response, Choice Health launched an internal investigation with the assistance of third-party cybersecurity specialists. Third-party company: Alight.com (Choice Health prev).
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Alight.com (Choice Health prev)
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2022-09-01 Breach occurred
- 2022-09-01 Publicly disclosed