UCHealth

The organization is known by the alias UCHealth Vendor, particularly in discussions of the cyber attack. Its headquarters is located in the United States of America. It operates as a third-party vendor. The vendor supplies operational software tools to its customers. One of its known healthcare clients is UCHealth.

On January 17, 2023, the vendor experienced a cybersecurity incident involving unauthorized access to its network. This breach resulted in the exposure of files related to UCHealth. The incident compromised personal information of 48,879 individuals. The exposed data included names, Social Security numbers, financial account details, dates of birth, and protected health information. UCHealth’s internal systems, such as email and electronic medical records, were not affected by the breach. The incident was reported in a legal news article published by JD Supra, accessible via the provided URL.

Following the discovery, the vendor notified UCHealth of the breach. UCHealth conducted a review of the impacted data to determine the scope of exposure. Subsequently, UCHealth issued breach notifications to the affected patients. The notification aimed to inform individuals whose information had been accessed. The breach heightened the risk of identity theft and fraud for those whose data was compromised. No further details about the vendor’s ownership structure or parent‑subsidiary relationships are provided in the source material.