Supply chain β›“ Supply Chain

Upstate Family Health Center, Inc. Third-Party Breach (January 2024)

πŸ“… 2024-01-01 🏒 HealthEC LLC
Primary Source β†—

Incident Details

Data breach at healthcare tech firm impacts 4.5 million patients. HealthEC LLC, a provider of health management solutions, suffered a data breach that impacts close to 4.5 million individuals who received care through one of the company’s customers. HealthEC provides a population health management (PHM) platform that healthcare organizations can use for data integration, analytics, care coordination, patient engagement, compliance, and reporting. On December 22, the firm disclosed that it suffered a data breach between July 14 and 23, 2023, which resulted in unauthorized access to some of its systems. Third-party company: HealthEC LLC.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
HealthEC LLC
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2024-01-01 Breach occurred
  2. 2024-01-03 Publicly disclosed