Skip to content

Supply chain breaches

123 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
Louisiana Office of Motor VehiclesMOVEit breach exposes data of all Louisiana license and ID holdersJun 15, 20233 years agoSupply chainUnverifiedUnknown
Transport for LondonTransport for London confirms it was hit by MOVEit mass hackJun 12, 20233 years agoSupply chainUnverifiedUnknown
OfcomMOVEit hack exposes data of 412 Ofcom staff and regulated firmsJun 12, 20233 years agoSupply chainUnverified412
Ernst & YoungMOVEit breach at EY exposes Bank of America customer dataJun 12, 20233 years agoSupply chain30K
Government of Nova ScotiaMOVEit payroll transfer breach exposes Nova Scotia public sector workersJun 6, 20233 years agoSupply chainUnknown
ZellisPayroll provider's MOVEit server breached, exposing data of eight client firmsJun 5, 20233 years agoSupply chainUnknown
Progress SoftwareMOVEit Transfer zero-day exploited by Cl0p in mass data theft campaignMay 31, 20233 years agoSupply chainUnknown
Gen DigitalCCleaner paid customers' personal data stolen in MOVEit hackMay 12, 20233 years agoSupply chain6
FakeGPT 'ChatGPT for Google' Chrome extensionFake ChatGPT browser extension hijacked Facebook accounts via stolen session cookiesMar 23, 20233 years agoSupply chainUnverifiedUnknown
Nuance CommunicationsMOVEit breach exposes patient data held by Nuance for healthcare providersNov 18, 20223 years agoSupply chain1.2M
KaseyaREvil ransomware pushed through Kaseya VSA hits up to 1,500 businessesJul 2, 20215 years agoSupply chainUnknown
University of CaliforniaMay 13, 20215 years agoSupply chain547Kacct
QualysQualys customer files taken through Accellion FTA serverMar 4, 20215 years agoSupply chainUnknown
SingtelSingtel customer data stolen through Accellion file sharing systemFeb 11, 20215 years agoSupply chainUnverifiedUnknown
AccellionZero-day attacks on legacy FTA file transfer appliance hit dozens of organizationsFeb 1, 20215 years agoSupply chainUnknown
Australian Securities and Investments CommissionASIC server breached through Accellion file transfer softwareJan 25, 20215 years agoSupply chainUnverifiedUnknown
Reserve Bank of New ZealandFiles illegally downloaded from central bank's Accellion file sharing systemJan 10, 20215 years agoSupply chainUnverifiedUnknown
US Federal GovernmentLikely Russian APT compromised fewer than ten US agencies via SolarWinds OrionJan 5, 20215 years agoSupply chainUnknown
MicrosoftSolarWinds attackers view Microsoft source code repositoriesDec 31, 20205 years agoSupply chainUnknown
SolarWindsBuild system compromise plants backdoor in Orion updates shipped to customersDec 14, 20205 years agoSupply chainUnknown
FireEyeNation-state attacker steals FireEye red team assessment toolsDec 8, 20205 years agoSupply chainUnknown
KrogerAccellion FTA breach exposes Kroger associate and pharmacy customer dataJun 18, 20206 years agoSupply chain1.5M
SK CommunicationsHackers steal personal data of 35 million Nate and Cyworld usersJul 28, 201115 years agoSupply chainUnverified35M

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.