HackerOne, Mazda, Infinite Campus and Dutch Ministry Hit by Data Breaches
HackerOne, Mazda, Infinite Campus, and Dutch Ministry confirm data breaches exposing employee and partner records.
Four organizations—HackerOne, Mazda, Infinite Campus, and the Dutch Ministry of Finance—disclosed data breaches affecting employee and partner information across multiple sectors. HackerOne and Mazda were compromised through third-party vendors (Navia and a warehouse management system), while Infinite Campus faces extortion threats from ShinyHunters group claiming access to Salesforce-related data. The incidents highlight how external vendor relationships and supply-chain dependencies can amplify breach impact even when internal security controls are in place.
AI summary of the linked source. Not reviewed by an editor. How this works
The lesson from this incident
Full lessonFour major organizations experienced data breaches primarily through compromised third-party vendors and supply chain partners, demonstrating how external dependencies can bypass internal security controls. HackerOne and Mazda were directly compromised through their vendor relationships (Navia and warehouse management systems), while Infinite Campus faced extortion related to Salesforce integration vulnerabilities. These incidents illustrate that organizations are only as secure as their weakest supply chain link, and that robust internal security measures cannot fully protect against vendor-originated breaches. The multi-sector impact shows how supply chain attacks can simultaneously affect diverse industries through shared service providers.
What helps against this
How we list vendors
- Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
- Security monitoring (SIEM)
Logs from everywhere end up in one place, with alerts that someone actually sees.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — ShinyHunters