Supply chain β›“ Supply Chain

Khalil Foundation Third-Party Breach (January 2025)

πŸ“… 2025-01-01 🏒 Transform Studios
Primary Source β†—

Incident Details

Billing Support Vendor Notifies 701K Patients About December 2023 Data Breach. Medusind, a Florida-based revenue cycle management vendor and practice management software provider, has recently started notifying individuals about a Medusind has notified 360,934 individuals that their protected health information was compromised in a December 2023 security incident. Data breaches have also recently been reported by Indiana University Health, Mid-Ohio Psychological Services, and Khalil Foundation (Khalil Center). Third-party company: Transform Studios.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Transform Studios
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2025-01-01 Breach occurred
  2. 2025-01-09 Publicly disclosed