Supply chain β›“ Supply Chain

Coles Third-Party Breach (May 2023)

πŸ“… 2023-05-01 🏒 Latitude Financial Services
Primary Source β†—

Incident Details

Coles confirms its customers impacted by Latitude Financial data breach. Supermarket giant Coles has confirmed it has been impacted by the Latitude Financial data breach, saying personal information used to issue historical Coles-branded credit cards has been stolen by a cyber criminal group. Coles has confirmed that card holders have been affected by the Latitude data breach. ( Supplied: Pxhere ). Last month, Latitude told the ASX it had been affected by a cyber attack that had affected 330,000 customer records. Third-party company: Latitude Financial Services.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Latitude Financial Services
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-05-01 Breach occurred
  2. 2023-04-15 Publicly disclosed