Supply chain
β Supply Chain
Khalil Foundation Third-Party Breach (January 2025)
Primary Source βIncident Details
Billing Support Vendor Notifies 701K Patients About December 2023 Data Breach. Medusind, a Florida-based revenue cycle management vendor and practice management software provider, has recently started notifying individuals about a Medusind has notified 360,934 individuals that their protected health information was compromised in a December 2023 security incident. Data breaches have also recently been reported by Indiana University Health, Mid-Ohio Psychological Services, and Khalil Foundation (Khalil Center). Third-party company: Transform Studios.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Transform Studios
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-01-01 Breach occurred
- 2025-01-09 Publicly disclosed