Supply chain ⛓ Supply Chain

Chubb Third-Party Breach (March 2020)

📅 2020-03-01 🏢 Not disclosed
Primary Source ↗

Incident Details

Cyber insurer Chubb had data stolen in Maze ransomware attack. Chubb, a major cybersecurity insurance provider for businesses hit by data breaches, has itself become a target of a data breach. The insurance giant told TechCrunch it was investigating a “security incident” involving the unauthorized access to data belonging to an unnamed third-party. Chubb spokesperson Jeffrey Zack said the company had “no evidence” the incident affected Chubb’s own network and that its network “remains fully operational.”. But the spokesperson declined to comment further or answer any of our questions, including if its customers were affected.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Not disclosed
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2020-03-01 Breach occurred
  2. 2020-03-26 Publicly disclosed