Supply chain
⛓ Supply Chain
MediSecure Third-Party Breach (May 2024)
Primary Source ↗Incident Details
MediSecure e-script firm hit by ‘large-scale’ ransomware data breach. Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor. The incident has impacted personal and health information of individuals but the extent remains unclear at this time. Operating since 2009, MediSecure provides digital tools to healthcare professionals to manage and dispense medications to patients.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Third-party vendor
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2024-05-01 Breach occurred
- 2024-05-16 Publicly disclosed