Supply chain β›“ Supply Chain

Wisconsin Department of Health Services Third-Party Breach (July 2024)

πŸ“… 2024-07-01 🏒 Disability Rights Wisconsin
Primary Source β†—

Incident Details

Email Breaches Reported by SkinCure Oncology & the Wisconsin Department of Health Services. SkinCure Oncology has notified 13,434 patients about an email attack that occurred in June 2023, and the Wisconsin Department of Health Services has A Disability Rights Wisconsin email account has been compromised, exposing the data of 19,150 Medicaid recipients. SkinCure Oncology has notified 13,434 patients about an email attack that occurred in June 2023. SkinCure Oncology in Burr Ridge, IL, has issued individual notifications to 13,434 patients whose protected health information was compromised in an email breach that occurred more than a year ago. According to the substitute breach notice, the investigation confirmed that multiple email accounts were accessed by an unauthorized third party between June 23 and June 25, 2023. Third-party company: Disability Rights Wisconsin.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Disability Rights Wisconsin
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2024-07-01 Breach occurred
  2. 2024-07-04 Publicly disclosed