Supply chain β›“ Supply Chain

Sutter Health Third-Party Breach (November 2023)

πŸ“… 2023-11-01 🏒 Virgin Pulse
Primary Source β†—

Incident Details

Sutter Health Confirms 84K Individuals Affected by Cyberattack on Business Associate. Sutter Health, a healthcare provider serving Northern California, has recently confirmed that patient data was compromised in a hacking incident at one of 845,441 Sutter Health patients impacted by MOVEit hack, Northern Iowa Therapy confirms 5,100-record data breach, and the West Central District Health Department in Nebraska has started notifying patients about a May 2023 cyberattack. Third-party company: Virgin Pulse.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Virgin Pulse
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-11-01 Breach occurred
  2. 2023-11-15 Publicly disclosed