Supply chain ⛓ Supply Chain

MediSecure Third-Party Breach (May 2024)

📅 2024-05-01 🏢 Third-party vendor
Primary Source ↗

Incident Details

MediSecure e-script firm hit by ‘large-scale’ ransomware data breach. Electronic prescription provider MediSecure in Australia has shut down its website and phone lines following a ransomware attack believed to originate from a third-party vendor. The incident has impacted personal and health information of individuals but the extent remains unclear at this time. Operating since 2009, MediSecure provides digital tools to healthcare professionals to manage and dispense medications to patients.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Third-party vendor
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2024-05-01 Breach occurred
  2. 2024-05-16 Publicly disclosed