Skip to content
Breaches.

Supply chain breaches

123 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
ElasticElastic Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnknown
CyberArkCyberArk Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
Cato NetworksCato Networks Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
BeyondTrustBeyondTrust Salesforce data stolen via Salesloft Drift OAuth tokensSep 4, 20251 year agoSupply chainUnverifiedUnknown
NutanixNutanix Salesforce data stolen via Salesloft Drift OAuth tokensSep 3, 20251 year agoSupply chainUnknown
ProofpointProofpoint Salesforce data stolen via Salesloft Drift OAuth tokensSep 2, 20251 year agoSupply chainUnknown
Palo Alto NetworksPalo Alto Networks Salesforce data stolen via Salesloft Drift OAuth tokensSep 2, 20251 year agoSupply chainUnknown
CloudflareCloudflare Salesforce data stolen via Salesloft Drift OAuth tokensSep 2, 20251 year agoSupply chainUnknown
SpyCloudSpyCloud Salesforce data stolen via Salesloft Drift OAuth tokensSep 1, 20251 year agoSupply chainUnknown
EskerEsker Salesforce data stolen via Salesloft Drift OAuth tokensSep 1, 20251 year agoSupply chainUnknown
ZscalerZscaler Salesforce data stolen via Salesloft Drift OAuth tokensAug 30, 20251 year agoSupply chainUnknown
BugcrowdBugcrowd Salesforce data stolen via Salesloft Drift OAuth tokensAug 27, 20251 year agoSupply chainUnknown
SalesloftStolen Drift AI chatbot OAuth tokens used to raid customer Salesforce instancesAug 26, 20251 year agoSupply chainUnverifiedUnknown
Nxs1ngularity: malicious Nx npm releases used AI CLIs to hunt and leak developer secretsAug 26, 20251 year agoSupply chainUnknown
AWSHacker slipped data-wiping prompt into Amazon Q coding assistant extensionJul 23, 20251 year agoSupply chainUnverifiedUnknown
HertzCleo zero-day breach exposes Hertz customers' licenses and card dataApr 11, 20251 year agoSupply chain1.2M
WK KelloggWK Kellogg employee data stolen in Cleo file transfer attacksApr 4, 20251 year agoSupply chain4,093
Western Alliance BankCleo zero-day breach exposes 21,899 Western Alliance Bank customersMar 14, 20251 year agoSupply chain22K
US Department of the TreasuryChinese state hackers access Treasury workstations via BeyondTrust keyDec 30, 20241 year agoSupply chainUnverifiedUnknown
CyberhavenHackers push malicious Cyberhaven Chrome extension update to steal sessionsDec 27, 20241 year agoSupply chainUnverifiedUnknown
UnisysSolarWinds-related intrusion understated in filings; USD 4M SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
MimecastSolarWinds-related intrusion minimized in disclosures; USD 990,000 SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
Check PointSolarWinds-related intrusion minimized in disclosures; USD 995,000 SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
AvayaSolarWinds-related intrusion minimized in disclosures; USD 1M SEC penaltyOct 22, 20241 year agoSupply chainUnverifiedUnknown
AutoZoneMOVEit breach exposes data of 184,995 AutoZone customers and staffNov 20, 20232 years agoSupply chain185K
State of MaineMOVEit breach exposes data of 1.3 million people across Maine agenciesNov 10, 20232 years agoSupply chain1.3M
University of MissouriMOVEit breach exposes University of Missouri personal dataOct 20, 20232 years agoSupply chain119K
Sony Interactive EntertainmentMOVEit zero-day exposes data of 6,791 Sony employees and relativesOct 3, 20232 years agoSupply chain6,791
BORN OntarioMOVEit breach exposes perinatal and child registry data of 3.4 millionSep 25, 20233 years agoSupply chainUnverified3.4M
WelltokMOVEit server breach exposes data of 8.5 million US patientsSep 22, 20233 years agoSupply chain15M
Cadence BankMOVEit zero-day used to steal Cadence Bank customer dataSep 15, 20233 years agoSupply chain14K
HoneywellMOVEit breach exposes pension plan participants' names and SSNsSep 13, 20233 years agoSupply chainUnknown
TD AmeritradeMOVEit Transfer breach exposes TD Ameritrade client SSNs and account dataAug 8, 20233 years agoSupply chainUnknown
Radius Global SolutionsCollections firm Radius hit by MOVEit breach exposing consumer dataAug 4, 20233 years agoSupply chain632K
Garrett MotionMOVEit exploitation exposes Garrett Motion company, employee and customer dataAug 2, 20233 years agoSupply chainUnknown
Performance Health TechnologyMOVEit breach at health plan vendor exposes 1.7 million Oregon Health Plan membersJul 31, 20233 years agoSupply chain1.8M
CareSourceMOVEit hack exposes CareSource members' health and personal dataJul 27, 20233 years agoSupply chain3.2M
MaximusMOVEit breach exposes personal and health data of 8 to 11 million peopleJul 26, 20233 years agoSupply chain9.2M
Johns Hopkins University and Health SystemMOVEit server breach at Johns Hopkins exposes personal informationJul 25, 20233 years agoSupply chainUnknown
Delta Dental of CaliforniaMOVEit breach exposes financial and card data of 6.9 million dental membersJul 12, 20233 years agoSupply chain7.1M
1st Source BankUnauthorized party accessed 1st Source Bank's MOVEit serverJul 10, 20233 years agoSupply chain450K
ShellShell confirms employee data accessed through MOVEit TransferJul 6, 20233 years agoSupply chainUnverifiedUnknown
UCLAUCLA confirms MOVEit Transfer compromise and notifies affected peopleJun 29, 20233 years agoSupply chainUnverifiedUnknown
Siemens EnergySiemens Energy confirms it was targeted in MOVEit attacksJun 29, 20233 years agoSupply chainUnverifiedUnknown
National Student ClearinghouseMOVEit breach at student records nonprofit affects 890 schoolsJun 29, 20233 years agoSupply chainUnknown
New York City Department of EducationMOVEit breach exposes data of about 45,000 NYC students and staffJun 26, 20233 years agoSupply chainUnverifiedUnknown
PBI Research ServicesMOVEit breach at pension death-audit vendor exposes millions of insurer customersJun 22, 20233 years agoSupply chainUnknown
Vitality GroupWellness vendor Vitality's MOVEit server breached, exposing client employeesJun 17, 20233 years agoSupply chain20K
US Department of EnergyTwo Department of Energy entities breached in MOVEit attacksJun 15, 20233 years agoSupply chainUnverifiedUnknown
Oregon Driver and Motor Vehicle ServicesMOVEit hack exposes records of 3.5 million Oregon license and ID holdersJun 15, 20233 years agoSupply chain3.5M

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.