Supply chain breaches

124 breaches

LiteLLMLiteLLM Compromised in Fresh Supply Chain AttackUnverifiedOct 23BigCommerceSupply chain exposed names, emails, phone numbers and addresses.TechUSUnverifiedSep 21MathspaceSupply chain exposed names, emails, children's data and education records.1.1M affectedEducationAUUnverifiedSep 3Framework ComputerFramework notifies all customers after Metabase zero-day breachTechUSUnverifiedAug 7PolymarketSupply chain exposed financial details.CryptoUSUnverifiedJun 25LastPassSupply chain exposed names, phone numbers, emails, addresses and messages.TechUSJun 238x8Supply chain exposed names, addresses, phone numbers, emails and internal documents.TechUSJun 23KlueSupply chain exposed credentials and tokens, API keys, names, emails and messages.TechCAJun 19JetBrains15 malicious AI assistant plugins stole developers' AI API keysTechCZUnverifiedJun 16MicrosoftHijacked Microsoft GitHub repos pushed password stealers to AI coding tool usersTechUSUnverifiedJun 8GitHubSupply chain exposed source code, credentials and tokens and API keys.TechUSMay 20Grafana LabsSupply chain exposed source code.TechUSUnverifiedMay 16OpenAITanStack npm supply chain attack reached two OpenAI employee devices and internal reposAIUSUnverifiedMay 14Mistral AITeamPCP offers Mistral AI code repos for sale after TanStack compromiseAIFRMay 14SAPOfficial SAP npm packages trojanized to steal developer credentialsTechDEUnverifiedApr 29CheckmarxSupply chain exposed credentials and tokens, API keys and source code.TechILApr 26BitwardenSupply chain exposed credentials and tokens and API keys.TechUSUnverifiedApr 23VercelBreach at AI app maker Context AI led to theft of Vercel customer credentialsTechUSApr 19AnodotSupply chain exposed credentials and tokens.Data brokersILUnverifiedApr 13MercorAI training data contractor hit via compromised LiteLLM open source packageAIUSUnverifiedMar 31CiscoSupply chain exposed source code and API keys.TechUSUnverifiedMar 31AxiosSupply chain exposed credentials and tokens.TechUnverifiedMar 31European CommissionSupply chain exposed names, emails, messages and internal documents.GovernmentBEMar 27LiteLLMMalware slipped into popular LiteLLM AI gateway package stole developer credentialsAIUSUnverifiedMar 24Aqua SecurityTrivy scanner releases and GitHub Actions hijacked to push credential stealerTechILUnverifiedMar 21Telus DigitalSupply chain exposed messages, credentials and tokens, source code and financial details.TechCAUnverifiedMar 11CClawHubOver 230 malicious OpenClaw skills pushed info-stealing malware to AI agent usersAIUnverifiedFeb 2Visual Studio Code MarketplaceMaliciousCorgi: AI coding extensions with 1.5M installs sent source files to ChinaTechUSUnverifiedJan 23GrubhubSupply chain exposed names and emails.RetailUSUnverifiedJan 15MAMalicious AI sidebar Chrome extensionsTwo Chrome AI sidebar extensions with 900,000 users stole ChatGPT and DeepSeek chatsTechUnverifiedDec 30, 2025Barts Health NHS TrustClop steals Barts Health invoices via Oracle EBS zero-dayHealthcareGBUnverifiedDec 5, 2025University of PhoenixClop Oracle EBS hack exposes 3.5M University of Phoenix records3.5M affectedEducationUSDec 2, 2025Dartmouth CollegeClop Oracle EBS attack exposes SSNs of 1,494 Dartmouth individuals99K affectedEducationUSNov 24, 2025Cox EnterprisesOracle EBS zero-day breach exposes 9,479 Cox Enterprises people9,479 affectedMediaUSNov 20, 2025GainsightSupply chain exposed names, emails and phone numbers.TechUSUnverifiedNov 19, 2025LogitechSupply chain exposed internal documents.TechCHNov 14, 2025Washington PostOracle EBS hack exposes Washington Post staff bank and SSN data9,720 affectedMediaUSNov 7, 2025GlobalLogicOracle EBS zero-day breach exposes 10,471 GlobalLogic employees10K affectedTechUSNov 7, 2025Envoy AirClop steals business data from American Airlines' Envoy via Oracle EBSTransportUSUnverifiedOct 17, 2025OracleClop exploits Oracle E-Business Suite zero-day to steal data from dozensTechUSOct 2, 2025PMpostmark-mcpFirst malicious MCP server on npm secretly BCC'd every email to attackerTechUnverifiedSep 25, 2025ToastSupply chain exposed names, emails and addresses.TechUSSep 18, 2025AvalaraSupply chain exposed names, emails, phone numbers and financial details.TechUSSep 12, 2025DynatraceSupply chain exposed names and emails.TechUSSep 8, 2025PantheonSupply chain exposed names and emails.TechUSSep 5, 2025FastlySupply chain exposed names and emails.TechUSSep 5, 2025TenableSupply chain exposed names, emails and phone numbers.TechUSSep 4, 2025RubrikSupply chain exposed names and emails.TechUSUnverifiedSep 4, 2025QualysSupply chain exposed names and emails.TechUSSep 4, 2025PagerDutySupply chain exposed names and emails.TechUSSep 4, 2025