Third party breach alerts written for TPRM analysts, covering vendor incidents, supply chain attacks, exposed data, affected systems, and practical protection steps.
Alation confirmed unauthorized activity in one system after a customer availability incident. TPRM analysts should treat data catalog platforms as sensitive suppliers until scope is clear.
Read More
CareCloud now lists more than 3.7 million people affected after an AWS environment tied to electronic health records was accessed. Here is what TPRM analysts should check next.
Read More
Heights Finance says a third party cloud platform used for customer data was accessed by an unauthorized actor. TPRM teams should review how lenders and service providers govern sensitive cloud stores.
Read More
Pokemon Center customers in the United Kingdom and Germany were warned after a CEVA Logistics cyberattack exposed order and contact data.
Read More
Trezor says ShipMonk exposed order data for 13,689 customers. Here is the third party risk response for TPRM analysts.
Read More
New reporting says the LiteLLM supply chain breach may have exposed thousands of organizations through build pipelines. TPRM teams should check AI dependencies, build secrets, and vendor notice paths now.
Read More
Attackers abused vulnerable TrueConf servers to replace client installers with backdoored copies. TPRM teams should treat trusted meeting update paths as a real software supply chain exposure.
Read More
Levi Strauss said an unauthorized third party accessed company files through social engineering against three employees. Here is what TPRM analysts should check with suppliers now.
Read More
Unlimited Technology Systems is now listed by HHS with 3.8 million affected people. The breach shows why TPRM teams need a clear view of healthcare business associates.
Read More
Quantum Health disclosed unauthorized file access, and downstream notices now point to employee and dependent data exposure. TPRM analysts should review benefits vendors, service paths, and notice handoffs.
Read More
A new guilty plea in the Snowflake customer data theft case shows how stolen credentials and weak tenant controls can turn a cloud service into a third party breach path.
Read More
Neon One has notified people after a Klue vendor incident exposed personal information. TPRM analysts should review every donor data path that depends on connected SaaS apps.
Read More