Supply chain β›“ Supply Chain

U.S. Lawmakers (House legislators) Third-Party Breach (June 2021)

πŸ“… 2021-06-01 🏒 iConstituent
Primary Source β†—

Incident Details

New Ransomware Targets US Congress Members: Did It Complete Breach iConstituent?. New ransomware targeted the vendor iConstituent. Security experts confirmed 60 U.S. Congress members were also affected. A new ransomware was able to hack several members of the United States Congress. Security experts confirmed that 60 of them were affected by the massive online attack. As of the moment, it is the latest cyber breach after the series of hacks that targeted the U.S. executive branch and other United States-based firms. Like the recent, ransomware schemes, which left many companies and institutions vulnerable to hacks, the new iConstituent breach could also lead to the same scenario. Third-party company: iConstituent.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
iConstituent
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2021-06-01 Breach occurred
  2. 2021-06-08 Publicly disclosed