Supply chain β›“ Supply Chain

Presbyterian Healthcare Services Third-Party Breach (November 2024)

πŸ“… 2024-11-01 🏒 Thompson Coburn
Primary Source β†—

Incident Details

Presbyterian Healthcare Services & ORM Fertility Patients Affected by Data Breaches. Oregon Reproductive Medicine, doing business as ORM Fertility, has announced a security breach that impacted certain computer systems and caused network Oregon Reproductive Medicine (ORM Fertility) has confirmed internal systems were accessed by an unauthorized individual in an August 2024 security breach. Presbyterian Healthcare Services patients have been affected by a data breach at the law firm Thompson Coburn. ORM Fertility said there was no unauthorized access to its electronic medical records (EMR), email, or customer relationship management system (CRM), and financial and insurance information was not exposed. The review of the affected files is ongoing; however, it appears that only limited patient data was exposed, such as names and lab data. The exact data types will be confirmed when the file review is concluded. Third-party company: Thompson Coburn.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Thompson Coburn
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2024-11-01 Breach occurred
  2. 2024-11-07 Publicly disclosed