Supply chain
⛓ Supply Chain
Blue Cross Blue Shield of Arizona (AZ Blue) Third-Party Breach (July 2023)
Primary Source ↗Incident Details
Third-Party Data Breaches Continue to Dominate Breach Notifications | TechTarget. The MOVEit hack and other third-party data breaches continue to impact healthcare entities across the country, this week’s data breach roundup shows. This week, Singing River Health System in Mississippi is actively facing system downtime as it investigates a cyberattack on its network. What’s more, Prospect Medical Holdings, which operates 16 hospitals and more than 165 clinics across Southern California, Rhode Island, Pennsylvania, and Connecticut, is still experiencing a systemwide outage that began on August 9. As these incidents continue to develop, other entities have continued to report confirmed data breaches to HHS, as exemplified in this week’s data breach roundup. Third-party data breaches continue to dominate breach notifications, causing breaches across the country. Third-party company: Cognizant Technology Solutions Corporation.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Cognizant Technology Solutions Corporation
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2023-07-01 Breach occurred
- 2023-08-28 Publicly disclosed