Major Supply Chain Attacks and Breaches
Supply chain compromises continue to be one of the most effective attack vectors for cybercriminals. Recent incidents highlight how vulnerabilities in third-party integrations and cloud ecosystems can ripple across multiple organizations. Salesloft / Drift Breach Cause: Attackers gained access via a compromised GitHub account , exploiting it to conduct a supply chain attack. Impact: The breach affected 22 downstream companies through stolen OAuth tokens from Drift customers' integrations. Actor: UNC6395 (tracked threat group). Risk: Unauthorized access to connected systems and SaaS environments, enabling lateral movement and data theft. Wealthsimple Data Breach Target: Wealthsimple, a leading Canadian investment platform . Cause: The breach stemmed from a third-party software package compromise in their supply chain. Impact: Exposure of sensitive customer data, highlighting the risks of relying on external dependencies in financial platforms. ...
