Supply chain ⛓ Supply Chain

Anthem MaineHealth Third-Party Breach (September 2022)

📅 2022-09-01 🏢 Alight.com (Choice Health prev)
Primary Source ↗

Incident Details

Anthem MaineHealth Reports Third Party Data Breach Related to Incident at Choice Health | JD Supra. On September 30, 2022, Anthem MaineHealth (“AMH Health”) filed an official notice of a data breach with the Office of the Maine Attorney General after. The available information regarding the Anthem MaineHealth / Choice Health breach comes from the company’s filing with the Office of the Maine Attorney General. According to this source, AMH Health was contacted by Choice Health on August 5, 2022, regarding a data breach affecting AMH Health patients that occurred on May 7, 2022. Evidently, on May 14, 2022, Choice Health was informed that an unauthorized party was offering data that was allegedly stolen from the Choice Health network. In response, Choice Health launched an internal investigation with the assistance of third-party cybersecurity specialists. Third-party company: Alight.com (Choice Health prev).

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Alight.com (Choice Health prev)
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2022-09-01 Breach occurred
  2. 2022-09-01 Publicly disclosed