Organizations and how harm spreads

Supply chain / supply-chain attack

The chain of companies that help make or deliver a product or service, such as suppliers and contractors, and the software they provide. In a supply-chain attack, attackers break into one company in the chain, often a less protected one, and use it to reach or harm the others. On this site, "Through a supplier" marks an organization hit by an attack or leak at a contractor or external service it used; its own systems may not have been broken into.