Supply-Chain Attack
Supply-chain attacks compromise a trusted vendor, library, or service to reach that vendor’s many downstream customers at once.
57tracked breaches
Groups using this method
Qilin 4The Gentlemen 3LockBit 2worldleaks 2ShinyHunters 2lapsus$ 2Icarus 1Akira 1coinbasecartel 1nitrogen 1ransomhouse 1J 1payoutsking 1cuba 1revil 1conti 1
Breaches using Supply-Chain Attack
August 22, 2026HIGH
August 17, 2026HIGH
August 15, 2026LOW
August 11, 2026HIGH
August 4, 2026CRIT
July 30, 2026HIGH
July 30, 2026HIGH
July 17, 2026HIGH
July 11, 2026HIGH
July 7, 2026HIGH
July 7, 2026HIGH
July 3, 2026HIGH
July 3, 2026MED
July 2, 2026HIGH
July 2, 2026CRIT
July 1, 2026HIGH
June 25, 2026HIGH
June 22, 2026MED
June 18, 2026MED
June 18, 2026HIGH
June 16, 2026HIGH
June 13, 2026CRIT
June 12, 2026HIGH
June 12, 2026HIGH
June 12, 2026CRIT
Nebraska Orthopaedic Center breach: names, birth dates and SSNs were copied
Supply-Chain Attack
Indico Data Solutions breach: was my Social Security number exposed?
Supply-Chain Attack
Those viral bank voice-clone fraud numbers are not a confirmed incident
Supply-Chain Attack
CISA Adds Three Vulnerabilities to Known Exploited Vulnerabilities Catalog
Supply-Chain Attack
CISA Adds Langflow, N-central, Tomcat to KEV Catalog
Supply-Chain Attack
Analog Devices Discloses Cybersecurity Incident in SEC 8-K
Supply-Chain Attack
CISA Alerts on PLC Targeting in Water Sector
Supply-Chain Attack
Ernst & Young Discloses Third-Party Support System Breach
Supply-Chain Attack
Bancroft Engineering Listed by LockBit
LockBit Ransomware
TheGentlemen breaches Michigan IT services provider
The Gentlemen Ransomware
Accenture confirms breach after 35GB source code offered for sale
Ransomware
SISINT Engineering Firm Breached by Qilin
Qilin Ransomware
Brazilian IT Firm Service IT Breached by WorldLeaks
worldleaks Ransomware
Chaos Ransomware Claims Breach of Universal Plant Services
Ransomware
First Agentic AI Ransomware Attack via Langflow
Ransomware
JadePuffer Executes First Fully Autonomous LLM Ransomware Attack
Ransomware
Nissan Discloses Employee Data Breach via Oracle PeopleSoft Zero-Day
Supply-Chain Attack
Bancroft Engineering Claimed by LockBit Ransomware
LockBit Ransomware
Icarus Group Steals Salesforce Data via Klue OAuth Breach
Icarus Ransomware
Additional Klue Supply-Chain Breach Victims Identified
Supply-Chain Attack
Italian Customs Broker CAD 93 Hit by DeadLock Ransomware
Ransomware
30K+ Fortinet Devices Compromised in Credential Heist
Supply-Chain Attack
Texas Parks & Wildlife Vendor Breach Exposes 3M License Holders
Supply-Chain Attack
Dynatrace Source Code Allegedly Stolen from GitHub
Supply-Chain Attack
Ivanti Sentry Critical Flaw Exploited in Under 24 Hours
Supply-Chain Attack
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.