CYBERSECURITYTRACKER
Permanent story citation

Breach victims discover their data was held by companies they’ve never heard of

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11534

As cited

Copy frozen at (site build).

breaches incidents

Breach victims discover their data was held by companies they’ve never heard of

According to Kroll's Data Breach Outlook 2026, nearly 70% of people affected by breaches handled by the firm were exposed through third-party suppliers rather than direct breaches of the organizations they interact with. Businesses commonly outsource data storage, transaction processing, and software operations to external providers, and a compromise at any supplier can expose customer records across multiple organizations. Breach victims often have no direct relationship with the compromised company holding their data.

Why it matters: Security and risk teams must assess third-party vendors' breach handling and data practices, as supply chain compromises now account for the majority of individual exposures in reported incidents.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary