Threat Intelligence Brief
Curated summary with source attribution
Source: claimdepot.com
Threat Risk: Medium
Victim: Tishman Speyer investors
Incident: Data breach of investor information via a third-party tax service provider.
Impact: Unauthorized exposure of Social Security numbers.
Attacker: Unidentified threat actors
Analysis: This incident underscores the critical risk posed by third-party supply chain vulnerabilities. An unauthorized party gained access to EY’s platform to exfiltrate client documents, specifically compromising sensitive identity data. The breach highlights how vulnerabilities in a service provider’s environment can jeopardize the privacy of a client’s high-profile investors.
Recommendations: Audit third-party data handling and storage agreements; Implement strict least-privilege access controls for external service providers; Encourage high-value targets to utilize identity monitoring services
Source: Claim Depot
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source