DisclosureLens

Supply-chain cascades

One breach at a service provider can surface as dozens of separate breach notifications, each filed by a different client organization. These are the cascades we have reviewed and confirmed: the vendor named in the filings, and every downstream victim that filed about it.

A cascade records that each listed organization filed a breach notification naming the same third party. It does not assert that the vendor was negligent or that it caused each breach.