Supply chain β›“ Supply Chain

Catholic Health Third-Party Breach (May 2025)

πŸ“… 2025-05-01 🏒 Serviceaide
Primary Source β†—

Incident Details

Breaches at Serviceaide, Nationwide Recovery Services expose medical info of more than 500,000 people. Hospitals tied to the two companies announced breaches over the last week involving Social Security numbers, financial information and sensitive health insurance data. The healthcare information of more than a half million people was leaked in two separate breaches impacting large hospital contractors. Hospitals tied to the technology provider Serviceaide and the debt collection giant Nationwide Recovery Services (NRS) announced breaches over the last week involving Social Security numbers, financial information and sensitive health insurance data. Third-party company: Serviceaide.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Serviceaide
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2025-05-01 Breach occurred
  2. 2025-05-19 Publicly disclosed