Supply chain
β Supply Chain
Sutter Health Third-Party Breach (November 2023)
Primary Source βIncident Details
Sutter Health Confirms 84K Individuals Affected by Cyberattack on Business Associate. Sutter Health, a healthcare provider serving Northern California, has recently confirmed that patient data was compromised in a hacking incident at one of 845,441 Sutter Health patients impacted by MOVEit hack, Northern Iowa Therapy confirms 5,100-record data breach, and the West Central District Health Department in Nebraska has started notifying patients about a May 2023 cyberattack. Third-party company: Virgin Pulse.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Virgin Pulse
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-11-01 Breach occurred
- 2023-11-15 Publicly disclosed