Supply chain β›“ Supply Chain

Amerita Third-Party Breach (September 2023)

πŸ“… 2023-09-01 🏒 PharMerica
Primary Source β†—

Incident Details

Amerita Notifies Nearly 220K of PharMerica Data Breach | TechTarget. MedMinder Systems and PurFoods also reported healthcare data breaches recently. Amerita, a specialty infusion services company, notified 219,707 individuals of a healthcare data breach that stemmed from its parent company, PharMerica. As previously reported , long-term care pharmacy network PharMerica disclosed a breach in May that impacted more than 5.8 million individuals. According to the Amerita notice, PharMerica learned of suspicious activity within its network in March 2023 and promptly launched an investigation. The company later determined that an unauthorized party had accessed Amerita computer systems between March 12 and 13. Third-party company: PharMerica.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
PharMerica
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-09-01 Breach occurred
  2. 2023-09-19 Publicly disclosed