Supply chain ⛓ Supply Chain

Many major companies including Amazon, Apple, etc. Third-Party Breach (October 2018)

📅 2018-10-01 🏢 Supermicro
Primary Source ↗

Incident Details

The Software Side of China’s Supply Chain Attack. Bloomberg the Company & Its Products The Company & its ProductsBloomberg Terminal Demo RequestBloomberg Anywhere Remote Login Bloomberg Anywhere LoginBloomberg Customer Support Customer Support. Connecting decision makers to a dynamic network of information, people and ideas, Bloomberg quickly and accurately delivers business and financial information, news and insight around the world. Connecting decision makers to a dynamic network of information, people and ideas, Bloomberg quickly and accurately delivers business and financial information, news and insight around the world. Third-party company: Supermicro.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Supermicro
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2018-10-01 Breach occurred
  2. 2018-10-04 Publicly disclosed