Supply chain
β Supply Chain
Boost Mobile Third-Party Breach (February 2023)
Primary Source βIncident Details
The Week in Ransomware - March 3rd 2023 - Wide impact attacks. This week was highlighted by a massive BlackBasta ransomware attack targeting DISH Network and taking down numerous subsidiaries, including SlingTV and Boost Mobile. The attack started on February 23rd, forcing the company to shut down portions of its IT systems, causing widespread outages among its services. However, it wasn’t until February 28th that DISH finally confirmed that they suffered a ransomware attack , with multiple sources telling BleepingComputer that the Black Basta ransomware gang was responsible. Third-party company: DISH Network Corporation.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- DISH Network Corporation
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-02-01 Breach occurred
- 2023-03-03 Publicly disclosed