Supply chain
β Supply Chain
Coles Third-Party Breach (May 2023)
Primary Source βIncident Details
Coles confirms its customers impacted by Latitude Financial data breach. Supermarket giant Coles has confirmed it has been impacted by the Latitude Financial data breach, saying personal information used to issue historical Coles-branded credit cards has been stolen by a cyber criminal group. Coles has confirmed that card holders have been affected by the Latitude data breach. ( Supplied: Pxhere ). Last month, Latitude told the ASX it had been affected by a cyber attack that had affected 330,000 customer records. Third-party company: Latitude Financial Services.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Latitude Financial Services
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-05-01 Breach occurred
- 2023-04-15 Publicly disclosed