Supply-Chain Attack
Supply-chain attacks compromise a trusted vendor, library, or service to reach that vendor’s many downstream customers at once.
57tracked breaches
Groups using this method
Qilin 4The Gentlemen 3LockBit 2worldleaks 2ShinyHunters 2lapsus$ 2Icarus 1Akira 1coinbasecartel 1nitrogen 1ransomhouse 1J 1payoutsking 1cuba 1revil 1conti 1
Breaches using Supply-Chain Attack
June 11, 2026HIGH
June 10, 2026HIGH
June 10, 2026HIGH
June 10, 2026HIGH
June 9, 2026HIGH
June 8, 2026MED
June 3, 2026HIGH
June 2, 2026HIGH
June 2, 2026HIGH
June 1, 2026MED
June 1, 2026HIGH
May 25, 2026MED
May 22, 2026HIGH
May 20, 2026HIGH
May 17, 2026HIGH
May 14, 2026HIGH
May 14, 2026HIGH
May 12, 2026HIGH
May 11, 2026HIGH
May 8, 2026MED
May 8, 2026MED
May 7, 2026CRIT
May 5, 2026LOW
May 4, 2026MED
April 28, 2026HIGH
Port Air Express Breached by Akira Ransomware
Akira Ransomware
ShinyHunters Targets Oracle PeopleSoft Servers
ShinyHunters Supply-Chain Attack
Mackay Sugar Hit by The Gentlemen Ransomware, Mills Shut
The Gentlemen Ransomware
Tata Electronics Confirms Cyberattack, Apple Manufacturing Data Leaked
worldleaks Ransomware
ServiceNow Discloses Customer Data Query Incident
Supply-Chain Attack
SoFi Hong Kong Discloses Third-Party Vendor Data Breach
Supply-Chain Attack
Emmy.tv AWS Credentials Exposed in Public HTML
Supply-Chain Attack
Red Hat NPM Packages Backdoored in Supply Chain Attack
Supply-Chain Attack
Ingka Group (IKEA) Targeted in Alleged Lapsus$ Data Theft
lapsus$ Ransomware
Oxford University Career Platform Hit by Third-Party Breach
Supply-Chain Attack
Oxford University Discloses CareerConnect Platform Breach
Supply-Chain Attack
ACAM Systemautomation Breached by TheGentlemen
The Gentlemen Ransomware
Oncology Institute Confirms Patient Data Impacted by Vendor Breach
Supply-Chain Attack
GitHub Confirms Breach of ~3,800 Internal Repos via Malicious VS Code Extension
Supply-Chain Attack
Grafana Suffers GitHub Token Breach and Extortion Attempt
coinbasecartel Ransomware
Malicious node-ipc npm Versions Steal Credentials
Supply-Chain Attack
OpenAI Confirms Breach via TanStack Supply Chain Attack
Supply-Chain Attack
Nitrogen Ransomware Claims Foxconn Breach
nitrogen Ransomware
Lapsus$ Leaks Vodafone Source Code and Database Credentials
lapsus$ Ransomware
SailPoint Discloses GitHub Repository Hack
Supply-Chain Attack
NVIDIA Confirms GeForce NOW Data Breach for Armenian Users
Supply-Chain Attack
West Pharmaceutical Services Hit by Ransomware
Ransomware
Cushman & Wakefield Data Breach (2026)
QilinShinyHunters Ransomware
RansomHouse claims breach of Trellix source code
Ransomware
Cybersecurity Vendor Listed by ransomhouse Ransomware Group
ransomhouse Ransomware
Check your exposure
Check if you’re exposed →Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.