Breach at Cloud Solution Provider PCM Inc.
Summary: PCM Inc., a California-based cloud solution provider with nearly 4,000 employees, more than 2,000 customers and about $2.2 billion in 2018 revenue, discovered in mid-May 2019 an intrusion in which attackers stole administrative credentials used to manage client accounts in Office 365. Sources told KrebsOnSecurity the intruders appeared mainly interested in data usable for gift card fraud at retailers and financial institutions, similar to the Wipro breach reported in April, and PCM said the impact was limited, remediated, and that affected customers were notified.
What's compelling: The attackers did not need a novel exploit: they took the administrative credentials PCM used to manage many clients' Office 365 accounts, so one stolen set of keys opened mail and file-sharing systems across a customer base of more than 2,000 organizations.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026