British Airways Plc notified the New Hampshire AG of a third-party supply chain breach involving vendor Brightline, which serves Aetna (British Airways' behavioral health plan provider). On Jan 31, 2023, Brightline's GoAnywhere MFT instance was compromised via unauthorized credentials, leading to PHI and PII exfiltration. Three NH residents were affected. The incident was contained, and law enforcement was engaged.
Affected (this filing): 3