Brian Krebs is reporting[1] this as a "supply chain attack". Will be interesting if any further details come out. Depending on where the exploit came from, this could potentially be a much bigger story.
We get resold Sisense for healthcare data analytics from our Electronic Health Record vendor. So this could be a massive HIPAA breach, if so I hope Sisense get driven out of business ASAP. A year of free credit monitoring will not make this better for us or thousands of clients.
Thankfully the EHR company has been working on a Sisense replacement for some time now and we're in the beta group, but...