How Not to Acknowledge a Data Breach
Summary: KrebsOnSecurity reported that multiple anonymous sources said Wipro, India's third-largest IT services provider, had its trusted networks used to launch cyberattacks against customers, and that Wipro acknowledged only a phishing incident six hours after the story ran. An investigator source dated the first phishing attack to March 11, a second campaign between March 16 and 19 that netted 22 additional employees, and more than 100 Wipro endpoints seeded with the remote access tool ScreenConnect, with at least one endpoint attacked using the password-dumping tool Mimikatz.
What's compelling: A major U.S. retailer customer cut off all online access to Wipro employees within days of learning its accounts were being used to target the retailer, and the intruders used that access for gift card fraud - a reminder that a vendor's compromised remote-access tooling can become the path into your own network.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026