Supply chain β›“ Supply Chain

Boost Mobile Third-Party Breach (February 2023)

πŸ“… 2023-02-01 🏒 DISH Network Corporation
Primary Source β†—

Incident Details

The Week in Ransomware - March 3rd 2023 - Wide impact attacks. This week was highlighted by a massive BlackBasta ransomware attack targeting DISH Network and taking down numerous subsidiaries, including SlingTV and Boost Mobile. The attack started on February 23rd, forcing the company to shut down portions of its IT systems, causing widespread outages among its services. However, it wasn’t until February 28th that DISH finally confirmed that they suffered a ransomware attack , with multiple sources telling BleepingComputer that the Black Basta ransomware gang was responsible. Third-party company: DISH Network Corporation.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
DISH Network Corporation
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-02-01 Breach occurred
  2. 2023-03-03 Publicly disclosed