29 minutes. Not the problem.
Tata Electronics, a supplier to Apple and Tesla, was hit by a cyberattack, per BleepingComputer, with hackers leaking sensitive documents on the dark web, as reported by Matrice Digitale and Bismark. The attack exposed presumed industrial secrets of Apple's iPhone, including proprietary data and employee information, with World Leaks claiming responsibility for the leak.
While the incident is seen as a straightforward data breach, it reveals a deeper issue of third-party risk management, as noted by the 2025 Verizon DBIR, which states that 30% of breaches involve third-party involvement. According to IBM's 2025 Cost of a Data Breach Report, the average cost of a breach is $4.44M, with supply chain compromises costing $4.91M on average.
The defensive math: -> Implement a supplier risk management program with regular audits and assessments, as 53% of organizations with a formal third-party risk management program reported a decrease in breach costs, per IBM. -> Conduct a thorough review of access controls and authentication protocols for all suppliers, as 88% of Basic Web Application attacks involved stolen credentials, according to Verizon DBIR. -> Develop an incident response plan that includes procedures for responding to third-party breaches, with a focus on containment and remediation, as the average time to remediate a breach is 241 days, per IBM.
Can your organization afford a $4.91M supply chain breach, and have you assessed your suppliers' security posture in the last quarter?