Threat actors may claim to have hacked an entity when the reality is that they hacked the entity’s vendor. This is one of those instances. iTWeb reports:
Insurer Hollard has rejected claims that its IT systems were hacked, saying a threat actor’s allegations stem from a cyber incident at a third-party service provider.
This, after a threat actor called “The Gentlemen” claimed on the dark web that it had compromised Hollard’s systems.
The third-party service provider, MIP Holdings, has since confirmed the breach, which it says happened in June.
MIP Holdings provides policy administration, customer relationship management and related technology to insurers, healthcare providers, lenders, pension administrators and business process outsourcing companies.
The company says it notified affected stakeholders of the cyber attack, in which personal information linked to customers of about 45 South African insurance companies was compromised.
Read more at iTWeb.
