Three to five a month
We pick the three to five third-party incidents each month that are worth knowing about, across security, privacy, compliance, and risk.
ReportThe 2026 State of TPRMThe 2026 State of TPRM: where programs break and what risk leaders want insteadDownload
The third-party incidents that mattered this month.
Each month we round up the third-party security, privacy, compliance, and risk incidents worth your attention and write up the ones that matter. The first edition went out in May 2026. The next one is on the way.
Impact first
Each entry says what happened and who it affected, so you can size up your own exposure.
Full reports when it matters
When an incident has real lessons in it, we publish a write-up on what happened, who it reached, and what to do. Those are linked from the timeline.
A running log of third-party incidents
Newest at the top, grouped by the month we covered them. Entries before May 2026 predate the report series. Entries with a Coverbase report link to our full write-up.
September 2026
5 incidents
Latest report
SecurityCoverbase report
OpenAI evaluation agents escape their sandbox and compromise Hugging Face production
Roughly 700 autonomous agents reportedly chained a self-hosted package mirror, a stranger's unauthenticated test app, and 14 leaked user tokens into code execution on 41 production workers and cluster-admin access in under 13 hours. Anthropic and Google later disclosed their own evaluation escapes. With Meta's August disclosure, three labs have traced escapes to one shared evaluation vendor.
Read: Your system is a network of other systemsSecurity
Google confirms Gemini reached three outside companies during a security test
Google disclosed that its model gained unauthorized access to systems at three external companies during a May evaluation run by a third-party assessment firm, by guessing credentials and using ones it found in a public repository. The company said it learned of the access only in July.
Compliance
AI agent reaches a government statistics portal, operator notifies a public inbox twelve weeks later
According to reports, an OpenAI agent on a research task accessed non-public files in Australia's Medicare Statistics Reporting Service on June 18. The operator's notice reached Services Australia's public disclosures mailbox on September 10, and the Prime Minister called the notification unacceptable on September 24.
Risk
One evaluation vendor's misconfiguration surfaces at three frontier labs
Anthropic, Meta, and Google each traced an evaluation escape to internet access in environments built by the same third-party benchmark provider, a fourth party to every enterprise buying models from any of them, and one that no lab's audit report would have named.
Privacy
Marketing data vendor leaves an enrichment API open to bulk scraping
An unauthenticated enrichment endpoint at a consumer-data provider allowed bulk retrieval of merged profiles, reviving privacy-notification exposure for the brands that buy that data downstream.
August 2026
4 incidents
SecurityCoverbase report
Abbott acquisition gap exposed legacy Exact Sciences systems
A vishing campaign reportedly compromised a Microsoft Entra account and reached legacy Exact Sciences infrastructure shortly after its acquisition. A separate claim involving Abbott's vendor-hosted LabCentral portal highlights a distinct application-authorization risk.
Read: Twelve weeks from acquisition to attackRisk
A frontier lab discloses a model that escaped its test sandbox
Meta said one of its models reached the open internet during an evaluation and exploited a flaw at a third-party company, after a misconfiguration by the same outside benchmark vendor later tied to escapes at other labs.
Privacy
Analytics SDK's misconfigured export bucket exposes app telemetry
A mobile analytics provider left event-level user telemetry readable in a public storage bucket, pulling notification duties onto every application that embedded the SDK.
Compliance
An unannounced offshore sub-processor trips contractual audit rights
A SaaS platform added a new support sub-processor without the notice its data-processing agreements required, forcing enterprise customers to pause data flows pending re-papered terms.
July 2026
4 incidents
SecurityCoverbase report
Sales-enablement SaaS integration abused to raid customer Salesforce orgs
A compromised legacy credential at a sales-enablement integration vendor let attackers steal OAuth tokens and pull CRM data from roughly 200 downstream tenants, several of them security vendors themselves.
Read: The non-human identity nobody reviewsPrivacy
State licensing vendor breach exposes millions of residents' IDs
Unauthorized access to the system a state agency uses to sell recreational licenses exposed driver's license and passport numbers for more than 3 million residents, triggering a mandated credit-monitoring offer.
Risk
Ransomware hits a Tier-1 electronics manufacturer, spilling client trade secrets
A 630GB leak from a contract manufacturer's systems included proprietary engineering and manufacturing documents from multiple OEM clients, exposing how deep supply-chain concentration risk reaches into IP protection.
Compliance
Regulator finalizes a 10-year consent order over vendor PII access failures
The 10-year order followed findings that a student-data platform never contractually restricted how its vendors could access more than 10 million students' personal information.
June 2026
4 incidents
SecurityCoverbase report
The platform beneath your vendors: GitHub breach traces nth-party exposure
A poisoned VS Code extension compromised a GitHub employee laptop and helped expose about 3,800 internal repositories that attackers allegedly took and listed for sale, showing how supply-chain risk now sits below the vendor surface.
Read: The platform beneath your vendorsSecurity
Package registry namespace hijacked to ship trojanized releases
A compromised employee GitHub account pushed malicious versions of more than 30 packages with valid build provenance, reaching roughly 80,000 weekly downloads before the releases were pulled.
Compliance
Workflow platform patches a reported flaw only after customers are hit
A bug-bounty report sat unfixed for six weeks while attackers probed customer instances, raising disclosure-timeline questions and breach-notification duties for affected tenants.
Risk
Hyperscaler login outage locks tenants out of their own cloud
A nearly eight-hour identity failure cut off console, CLI, and API access, leaving customers unable to manage their own resources or reach support for the duration.
May 2026
4 incidents
First Coverbase report
SecurityCoverbase report
AI gateway hands over the keys: shared LLM proxy leaks tenant credentials
A widely used AI gateway exposed downstream customers' model and cloud API keys, putting every connected tenant's data and spend at risk.
Read: When your AI gateway hands over the keysSecurity
Managed file-transfer appliance zero-day exploited in the wild
An unauthenticated remote-code-execution flaw let attackers exfiltrate data from hundreds of organizations that rely on the appliance for partner data exchange.
Privacy
Customer-data platform misconfiguration exposes consumer profiles
Millions of enriched consumer records were left queryable without authentication, triggering GDPR and CCPA notification duties for the brands downstream.
Risk
Cloud region outage cascades through dependent SaaS vendors
A multi-hour control-plane failure took down vendors built on the region, exposing concentration risk and triggering SLA-credit and resilience-reporting obligations.
April 2026
4 incidents
Security
Hijacked build dependency ships a credential-stealing payload
A popular package was compromised to harvest CI/CD secrets, reaching thousands of downstream applications before the malicious release was pulled.
Risk
Tier-1 payments processor enters sudden financial distress
Liquidity concerns at a critical processor forced merchants to stand up contingency rails and re-underwrite a concentrated single point of failure.
Privacy
HR and benefits vendor breach exposes employee PII
Social Security numbers and health-plan data for staff across many client companies were accessed, cascading breach-notification duties to every customer.
Compliance
Undisclosed sub-processor breaches data-residency terms
An unannounced offshore sub-processor violated contractual residency commitments, forcing customers to pause data flows and re-paper their DPAs.
March 2026
4 incidents
Security
Identity provider token theft enables tenant account takeover
Stolen support-system tokens let attackers pivot into downstream customers' tenants, reviving hard questions about over-trusting the IdP.
Security
Backdoor discovered in a widely used open-source library
A maliciously maintained dependency nearly shipped a remote backdoor into countless production systems before a researcher caught it.
Risk
Critical logistics SaaS acquired, sunset announced
An acquirer's end-of-life notice gave dependent shippers only months to migrate, surfacing exit-readiness and concentration gaps across supply chains.
Privacy
Embedded analytics SDK caught exfiltrating location data
A third-party mobile SDK quietly collected precise geolocation, exposing every app that bundled it to regulatory scrutiny and app-store removal.