Supply chain β›“ Supply Chain

European Banking Authority Third-Party Breach (March 2021)

πŸ“… 2021-03-01 🏒 Microsoft
Primary Source β†—

Incident Details

European Banking Authority hit by Microsoft Exchange hack. The EU body is one of the first major organisations to admit falling victim to the global email hack. The European Banking Authority’s email servers have been compromised in a global Microsoft Exchange cyber-attack. The EU body said personal data may have been accessed from its servers. And it had pulled its entire email system offline while it assessed the damage. Third-party company: Microsoft.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Microsoft
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2021-03-01 Breach occurred
  2. 2021-03-08 Publicly disclosed