Supply chain
⛓ Supply Chain
Many major companies including Amazon, Apple, etc. Third-Party Breach (October 2018)
Primary Source ↗Incident Details
The Software Side of China’s Supply Chain Attack. Bloomberg the Company & Its Products The Company & its ProductsBloomberg Terminal Demo RequestBloomberg Anywhere Remote Login Bloomberg Anywhere LoginBloomberg Customer Support Customer Support. Connecting decision makers to a dynamic network of information, people and ideas, Bloomberg quickly and accurately delivers business and financial information, news and insight around the world. Connecting decision makers to a dynamic network of information, people and ideas, Bloomberg quickly and accurately delivers business and financial information, news and insight around the world. Third-party company: Supermicro.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Supermicro
- Supply Chain Attack
- ✅ Confirmed third-party / vendor compromise
Timeline
- 2018-10-01 Breach occurred
- 2018-10-04 Publicly disclosed