Supply chain
β Supply Chain
Upstate Family Health Center, Inc. Third-Party Breach (January 2024)
Primary Source βIncident Details
Data breach at healthcare tech firm impacts 4.5 million patients. HealthEC LLC, a provider of health management solutions, suffered a data breach that impacts close to 4.5 million individuals who received care through one of the company’s customers. HealthEC provides a population health management (PHM) platform that healthcare organizations can use for data integration, analytics, care coordination, patient engagement, compliance, and reporting. On December 22, the firm disclosed that it suffered a data breach between July 14 and 23, 2023, which resulted in unauthorized access to some of its systems. Third-party company: HealthEC LLC.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- HealthEC LLC
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2024-01-01 Breach occurred
- 2024-01-03 Publicly disclosed