Supply chain β›“ Supply Chain

Blue Shield of California Third-Party Breach (August 2024)

πŸ“… 2024-08-01 🏒 Young Consulting
Primary Source β†—

Incident Details

Ransomware Hackers Steal Medical Insurance Data of 1M People. Young Consulting, which develops software for the stop-loss insurance market, is notifying 1 million individuals that their personal information was stolen earlier. Data Breach Notification , Data Security , Fraud Management & Cybercrime. An Atlanta-based software developer that works with people’s health data is notifying nearly 1 million individuals that their personal information was stolen earlier this year by attackers. A ransomware group called BlackSuit claimed credit for the attack and leaked stolen data. Third-party company: Young Consulting.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Young Consulting
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2024-08-01 Breach occurred
  2. 2024-08-01 Publicly disclosed