Supply chain β›“ Supply Chain

U.S. Department of Energy Third-Party Breach (May 2021)

πŸ“… 2021-05-01 🏒 Fermilab
Primary Source β†—

Incident Details

US Physics Laboratory Exposed Documents, Credentials. The Fermilab physics laboratory in the U.S. has tidied up its systems after security researchers found weaknesses exposing documents, proprietary applications,. Critical Infrastructure Security , Governance & Risk Management , IT Risk Management. See Also: Unlocking the Power of Cyber Threat Intelligence (CTI): A Practical Guide with Bitsight. Third-party company: Fermilab.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Fermilab
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2021-05-01 Breach occurred
  2. 2021-05-01 Publicly disclosed