Kroll: tech-firm breaches drove most third-party victim impact
Original title: Attacks on Tech Firms Behind Most Third-Party Data Breach Victims
From June 2025 to June 2026, tech compromises accounted for 60% of all breach victims Kroll counted.
Kroll reports that 69% of data-breach victims in the past year were affected through a third party, and 79% of those people were exposed after a technology-company compromise from June 2025 to June 2026. Technology incidents caused 60% of all victims, while finance and professional services each accounted for 20% of breach incidents and technology only 6%. Among surveyed security leaders, 69% said their organization was breached in the prior 12 months and 34% reported more than one.
Unconfirmed: The Chinese nation-state access to ConnectWise is described as reported, not as a Kroll finding.
- Other third-party victim sources were finance 9%, insurance 6% and healthcare 5%.
- Insurance, finance, healthcare and education followed technology in share of victims.
- Kroll says one vendor incident can reach organizations with no direct relationship to the source.
- The article cites Scattered Spider targeting IT providers and a reported ConnectWise intrusion.
Impact: Third-party compromises exposed data of downstream individuals and organizations.
- Vendors
- ConnectWise
- Threat actors
- Scattered Spider
- Organizations
- Kroll
- Countries
- China
From the original article
2 min read at infosecurity-magazine.com
Kroll found that 69% of data breach victims in the past year were affected by a third-party breach, with attacks on tech companies the most common cause
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.