Source: Deloitte Breach Affected All Company Email, Admin Accounts
Summary: Deloitte acknowledged a breach of its internal email platform after The Guardian reported it, saying only "very few" clients were impacted. A source close to the investigation told KrebsOnSecurity the intrusion dates to at least fall 2016 and involved all administrator accounts and the entire internal email system, with several gigabytes exfiltrated to a server in the United Kingdom.
Bottom line: The source says investigators still are not certain they have fully evicted the intruders, and that Deloitte never notified its advisory or cyber intel clients - including FedEx, Invesco and CSAA Insurance - despite the firm advising others on security.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026