Supply chain
β Supply Chain
CyberArk Software Ltd. Third-Party Breach (September 2025)
Primary Source βIncident Details
In 2025, CyberArk Software Ltd. experienced a data security incident via a third-party vendor relationship.
The compromised third-party vendor was Drift (Salesloft). Source reporting:
https://www.cyberark.com/resources/blog/salesloft-drift-incident-overview-and-cyberarks-response
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Drift (Salesloft)
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-09-01 Breach occurred
- 2025-09-01 Publicly disclosed