Supply chain ⛓ Supply Chain

Hawaii Medical Service Association (HMSA) Third-Party Breach (February 2024)

📅 2024-02-01 🏢 Navvis & Company
Primary Source ↗

Incident Details

462,000 Hawai’i Residents Affected by Data Breach at Navvis & Company. Approximately 462,000 individuals who enrolled in health plans through the Hawaii Medical Service Association (HMSA) have been affected by a data breach Approximately 462,000 individuals who enrolled in health plans through the Hawaii Medical Service Association were affected by a data breach at vendor Navvis & Company. Data breaches have also been announced by Coastal Hospice & Palliative Care and Atlanta Women’s Health Group. Third-party company: Navvis & Company.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Navvis & Company
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2024-02-01 Breach occurred
  2. 2024-02-07 Publicly disclosed