Supply chain
⛓ Supply Chain
Hawaii Medical Service Association (HMSA) Third-Party Breach (February 2024)
Primary Source ↗Incident Details
462,000 Hawai’i Residents Affected by Data Breach at Navvis & Company. Approximately 462,000 individuals who enrolled in health plans through the Hawaii Medical Service Association (HMSA) have been affected by a data breach Approximately 462,000 individuals who enrolled in health plans through the Hawaii Medical Service Association were affected by a data breach at vendor Navvis & Company. Data breaches have also been announced by Coastal Hospice & Palliative Care and Atlanta Women’s Health Group. Third-party company: Navvis & Company.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Navvis & Company
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2024-02-01 Breach occurred
- 2024-02-07 Publicly disclosed