Supply chain
β Supply Chain
Catholic Health Third-Party Breach (May 2025)
Primary Source βIncident Details
Breaches at Serviceaide, Nationwide Recovery Services expose medical info of more than 500,000 people. Hospitals tied to the two companies announced breaches over the last week involving Social Security numbers, financial information and sensitive health insurance data. The healthcare information of more than a half million people was leaked in two separate breaches impacting large hospital contractors. Hospitals tied to the technology provider Serviceaide and the debt collection giant Nationwide Recovery Services (NRS) announced breaches over the last week involving Social Security numbers, financial information and sensitive health insurance data. Third-party company: Serviceaide.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Serviceaide
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-05-01 Breach occurred
- 2025-05-19 Publicly disclosed