{"id":547,"date":"2023-04-16T10:57:03","date_gmt":"2023-04-16T15:57:03","guid":{"rendered":"https:\/\/kentprotect.com\/?p=547"},"modified":"2023-04-16T11:27:23","modified_gmt":"2023-04-16T16:27:23","slug":"breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/","title":{"rendered":"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"wp-block-paragraph\">(image source: Iowa Medicaid (Iowa Compass), 2022)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iowa Medicaid was breached with ILS in mid-2022, involving 20,000+ members and linked to ILS&#8217;s 4.2 million member breach, demonstrating fourth-party cyber risk. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iowa Department of Health and Human Services&nbsp;(HHS), Iowa Medicaid, 20,815 Iowa residents, Telligen,  Independent Living systems, FBI, and a threat actor. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">June 30, 2022-July 5, 2022: Independent Living Systems is breached, and 20,000+ Iowa Medicaid members are involved. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">July 5, 2022: ILS detects the breach <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 14, 2023: ILS notifies Telligen of the breach <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 17, 2023: Telligen notifies Iowa HHS and Medicaid <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">April 11, 2023: Iowa HHS posts breach notice on their website <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Over 20,000+ Iowa Medicaid members were involved in a major breach at <a href=\"https:\/\/kentprotect.com\/index.php\/2023\/03\/17\/independent-living-systems-hacked-notifies-4-2-million-affected-patients-consumers-8-months-after\/\" target=\"_blank\" rel=\"noreferrer noopener\">Independently Living Systems (involving 4.2 million individuals), previously reported over a month ago<\/a> (Iowa HHS 2023a; Iowa HHS 2023b). It was involved due to a fourth-party relationship. Iowa Medicaid originally contracted with Telligen, a healthcare consultancy. Telligen, a Medicaid contractor, was outsourcing a portion of their work to ILS, which was breached in the middle of last year. Due to this fourth-party relationship, data from Iowa Medicaid members was involved in the ILS breach. The specific data breached has not been disclosed at this time, and Iowa Medicaid is not currently listed on the <a href=\"https:\/\/www.iowaattorneygeneral.gov\/for-consumers\/security-breach-notifications\/2023-security-breach-notification\" target=\"_blank\" rel=\"noreferrer noopener\">Iowa OAG breach portal<\/a>. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Breach notification costs, M-F call center <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Federal: HIPAA and HITECH<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">State: Iowa Code Chapter 715C<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iowa HHS\/Medicaid: Fourth-party breach<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ILS: TBA or N\/A (see disclaimer)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Risk doesn&#8217;t stop at a third party. Fourth-party risk and beyond must be included in an organizational risk assessment, including the supply chain.  <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iowa HHS. (2023a). National Data Breach Impacts Some Iowa Medicaid Members. In <em>Iowa HHS<\/em>. Iowa Department of Health and Human Services. Retrieved April 16, 2023, from https:\/\/hhs.iowa.gov\/national-data-breach-impacts-some-iowa-medicaid-members<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iowa HHS. (2023b). April 23 Medicaid Breach FAQ. In <em>Iowa HHS<\/em>. Iowa Department of Health and Human Services. Retrieved April 16, 2023, from https:\/\/hhs.iowa.gov\/sites\/default\/files\/April_23_Medicaid_Breach_FAQ.pdf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iowa Medicaid (Iowa Compass). (2022, September 21). <em>untitled<\/em>. Facebook. https:\/\/www.facebook.com\/compassiowa\/photos\/a.427466990622933\/5408435359192713\/?type=3<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iowa OAG. (2023). 2023 Security Breach Notification. In <em>Attorney General Brenna Bird<\/em>. Iowa Department of Justice. Retrieved April 16, 2023, from https:\/\/www.iowaattorneygeneral.gov\/for-consumers\/security-breach-notifications\/2023-security-breach-notification<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/M8L0KK9311k?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>(image source: Iowa Medicaid (Iowa Compass), 2022) One-sentence summary: Iowa Medicaid was breached with ILS in mid-2022, involving<\/p>\n","protected":false},"author":4,"featured_media":549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[68,480,3,12,13,76,63,274,75,61,11,10,77,74,430,493,14,484,69,71,241,504,45,503,43,44,72,70,368,502,8,27,505,221,67,15,81],"class_list":["post-547","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-been-pwned","tag-breach","tag-breach-report","tag-breaches","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-dark-web","tag-data-breach","tag-doctors","tag-equipment","tag-executive","tag-global","tag-have-been-pwned","tag-have-i-pwned","tag-haveibeenpwned","tag-healthandhumanservices","tag-healthcare","tag-hhs","tag-hipaa","tag-hitech","tag-i-been-pwned","tag-i-have-been-pwned","tag-ils","tag-iowa","tag-kent-protect","tag-kentprotect","tag-medicaid","tag-nurses","tag-pwned","tag-summary","tag-texas"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored - Kent Protect<\/title>\n<meta name=\"description\" content=\"Iowa Medicaid was breached with ILS in mid-2022, involving 20,000+ members and linked to ILS&#039;s 4.2 million member breach, demonstrating fourth-party cyber risk.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"Iowa Medicaid was breached with ILS in mid-2022, involving 20,000+ members and linked to ILS&#039;s 4.2 million member breach, demonstrating fourth-party cyber risk.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-16T15:57:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-16T16:27:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/307884514_5403578823011700_9005263513164076427_n.png\" \/>\n\t<meta property=\"og:image:width\" content=\"751\" \/>\n\t<meta property=\"og:image:height\" content=\"187\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored\",\"datePublished\":\"2023-04-16T15:57:03+00:00\",\"dateModified\":\"2023-04-16T16:27:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/\"},\"wordCount\":396,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/307884514_5403578823011700_9005263513164076427_n.png\",\"keywords\":[\"been pwned\",\"breach\",\"breach report\",\"breaches\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"dark web\",\"data breach\",\"doctors\",\"equipment\",\"executive\",\"global\",\"have been pwned\",\"have I pwned\",\"haveibeenpwned\",\"healthandhumanservices\",\"healthcare\",\"hhs\",\"HIPAA\",\"HITECH\",\"I been pwned\",\"I have been pwned\",\"ILS\",\"iowa\",\"kent protect\",\"kentprotect\",\"medicaid\",\"nurses\",\"pwned\",\"summary\",\"texas\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/\",\"name\":\"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/307884514_5403578823011700_9005263513164076427_n.png\",\"datePublished\":\"2023-04-16T15:57:03+00:00\",\"dateModified\":\"2023-04-16T16:27:23+00:00\",\"description\":\"Iowa Medicaid was breached with ILS in mid-2022, involving 20,000+ members and linked to ILS's 4.2 million member breach, demonstrating fourth-party cyber risk.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/307884514_5403578823011700_9005263513164076427_n.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/307884514_5403578823011700_9005263513164076427_n.png\",\"width\":751,\"height\":187,\"caption\":\"Iowa Medicaid logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/16\\\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored - Kent Protect","description":"Iowa Medicaid was breached with ILS in mid-2022, involving 20,000+ members and linked to ILS's 4.2 million member breach, demonstrating fourth-party cyber risk.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/","og_locale":"en_US","og_type":"article","og_title":"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored - Kent Protect","og_description":"Iowa Medicaid was breached with ILS in mid-2022, involving 20,000+ members and linked to ILS's 4.2 million member breach, demonstrating fourth-party cyber risk.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/","og_site_name":"Kent Protect","article_published_time":"2023-04-16T15:57:03+00:00","article_modified_time":"2023-04-16T16:27:23+00:00","og_image":[{"width":751,"height":187,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/307884514_5403578823011700_9005263513164076427_n.png","type":"image\/png"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored","datePublished":"2023-04-16T15:57:03+00:00","dateModified":"2023-04-16T16:27:23+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/"},"wordCount":396,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/307884514_5403578823011700_9005263513164076427_n.png","keywords":["been pwned","breach","breach report","breaches","ciso","cloud","computer security","computers","cyber security","cybercrime","cybersecurity","dallas","dark web","data breach","doctors","equipment","executive","global","have been pwned","have I pwned","haveibeenpwned","healthandhumanservices","healthcare","hhs","HIPAA","HITECH","I been pwned","I have been pwned","ILS","iowa","kent protect","kentprotect","medicaid","nurses","pwned","summary","texas"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/","name":"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/307884514_5403578823011700_9005263513164076427_n.png","datePublished":"2023-04-16T15:57:03+00:00","dateModified":"2023-04-16T16:27:23+00:00","description":"Iowa Medicaid was breached with ILS in mid-2022, involving 20,000+ members and linked to ILS's 4.2 million member breach, demonstrating fourth-party cyber risk.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/307884514_5403578823011700_9005263513164076427_n.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/307884514_5403578823011700_9005263513164076427_n.png","width":751,"height":187,"caption":"Iowa Medicaid logo"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/16\/breach-report-iowa-medicaid-data-breach-affects-20000-linked-to-4-2-million-member-breach-fourth-party-risk-underscored\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"Breach Report: Iowa Medicaid data breach affects 20,000+, linked to 4.2 million member breach, fourth-party risk underscored"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/547","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=547"}],"version-history":[{"count":3,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/547\/revisions"}],"predecessor-version":[{"id":554,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/547\/revisions\/554"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/549"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=547"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=547"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=547"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}