Kroll: most people it notified were exposed via a third-party breach
Original title: Breach victims discover their data was held by companies they’ve never heard of
Technology providers were 6% of Kroll cases but 60% of affected people; one supplier incident can spawn many insurance claims.
Kroll’s Data Breach Outlook 2026 says nearly seven in ten people affected in breaches it handled were exposed through an outside supplier. Technology companies were 6% of cases and 60% of affected individuals because one provider can hold records for many clients. Kroll cites MOVEit as an example of exposure through both direct software use and vendors. About four in ten respondents called vendor dependencies a challenge in breach-response decisions, and insurers face clusters of claims from a single supplier incident.
Unconfirmed: Figures describe breaches Kroll handled and its survey respondents, not all breaches worldwide.
- Denyl Green said a vendor or service provider linked most major incidents Kroll handled.
- Around four in ten respondents cited vendor dependencies when deciding breach response.
- Katherine Keefe said one supplier breach can trigger dozens or hundreds of cyber insurance claims.
Impact: Customer records exposed through suppliers the people never dealt with
From the original article
2 min read at helpnetsecurity.com
Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and operate software.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.