Supply chain
β Supply Chain
Presbyterian Healthcare Services Third-Party Breach (November 2024)
Primary Source βIncident Details
Presbyterian Healthcare Services & ORM Fertility Patients Affected by Data Breaches. Oregon Reproductive Medicine, doing business as ORM Fertility, has announced a security breach that impacted certain computer systems and caused network Oregon Reproductive Medicine (ORM Fertility) has confirmed internal systems were accessed by an unauthorized individual in an August 2024 security breach. Presbyterian Healthcare Services patients have been affected by a data breach at the law firm Thompson Coburn. ORM Fertility said there was no unauthorized access to its electronic medical records (EMR), email, or customer relationship management system (CRM), and financial and insurance information was not exposed. The review of the affected files is ongoing; however, it appears that only limited patient data was exposed, such as names and lab data. The exact data types will be confirmed when the file review is concluded. Third-party company: Thompson Coburn.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Thompson Coburn
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2024-11-01 Breach occurred
- 2024-11-07 Publicly disclosed