Supply chain
⛓ Supply Chain
Iowa Department of Health and Human Services – Iowa Medicaid Enterprise (Iowa HHS-IME) Third-Party Breach (April 2023)
Primary Source ↗Incident Details
April 2023 Healthcare Data Breach Report. There was a 17.5% month-over-month fall in the number of reported healthcare data HIPAA compliance breaches with 52 breaches of 500 or more records There was a 17.5% month-over-month fall in the number of reported healthcare data breaches with 52 breaches of 500 or more records reported and 4,425,891 records breached. One of the largest healthcare data breaches of the year was reported in April, but there was still a significant month-over-month reduction in breached records, which fell by 30.7% to 4,425,891 records. The total is less than the 12-month average of 4.9 million records a month, although more than twice the number of records that were breached in April 2022. Third-party company: Independent Living Systems.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Independent Living Systems
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2023-04-01 Breach occurred
- 2023-05-23 Publicly disclosed