Supply chain
⛓ Supply Chain
CoxHealth Third-Party Breach (June 2023)
Primary Source ↗Incident Details
UPMC contractor detects patient data breach. A contractor for UPMC said it discovered a data breach that could have impacted customer and patient information. Tennessee-based Intellihartx LLC said it found that its secure file transfer service provider, Fortra, “experienced a data security incident.” The company undertook an investigation to figure out the scope of the incident. Intellihartx is notifying those potentially affected. It said it so far is unaware of anyone misusing the information. UPMC, along with other health care companies, uses Intellihartx’s services as part of its billing and collections. The breach occurred in February, UPMC said Friday. Third-party company: Intellihartx LLC.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Intellihartx LLC
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2023-06-01 Breach occurred
- 2023-06-13 Publicly disclosed