By Fred Kneip, CEO, CyberGRX The common attack vector between this breach and many others, including the Mass. General Hospital breach in June, is a healthcare provider’s third party, or “business associate,” as defined by the Department of Health and Human Services. Breaches via a third party are a rapidly growing technique of bad actors looking to circumvent security controls put in place by sophisticated security teams. Becker’s Hospital Review, “Cyber attack vector du jour – Third party digital ecosystem” November 8, 2016