Supply chain ⛓ Supply Chain

CoxHealth Third-Party Breach (June 2023)

📅 2023-06-01 🏢 Intellihartx LLC
Primary Source ↗

Incident Details

UPMC contractor detects patient data breach. A contractor for UPMC said it discovered a data breach that could have impacted customer and patient information. Tennessee-based Intellihartx LLC said it found that its secure file transfer service provider, Fortra, “experienced a data security incident.” The company undertook an investigation to figure out the scope of the incident. Intellihartx is notifying those potentially affected. It said it so far is unaware of anyone misusing the information. UPMC, along with other health care companies, uses Intellihartx’s services as part of its billing and collections. The breach occurred in February, UPMC said Friday. Third-party company: Intellihartx LLC.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Intellihartx LLC
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2023-06-01 Breach occurred
  2. 2023-06-13 Publicly disclosed