Articles from Blueberry Medical

On August 10, an unauthorized actor exploited a critical vulnerability in the Metabase platform to obtain administrator access to Blueberry’s Metabase environment. The activity was associated with broader exploitation of the Metabase vulnerability. On August 22, Blueberry detected the unauthorized access and initiated its incident-response process. Within approximately one hour of detection, Blueberry terminated the unauthorized access and associated sessions and preserved relevant logs and system evidence. To prevent future occurrences and in light of the Metabase incident, Blueberry Medical has strengthened its authentication, implemented an additional monitoring and escalation process for its vendors’ critical vulnerabilities, and increased the frequency of security reviews for third-party and self-hosted technology infrastructure, such as Metabase. Blueberry also confirmed that Metabase was running a non-vulnerable version by then. Blueberry also reached out to law enforcement and retained a leading forensic and cyber security response firm.