Ericsson US confirms breach after third-party provider attack

Security Affairs

March 10, 2026 at 8:44 AM

Overview

Ericsson US has confirmed a data breach resulting from an attack on a third-party service provider. This incident has put the personal information of an unknown number of employees and customers at risk. The company did not specify the exact details of the breach, such as how many individuals were affected or what specific types of data were compromised. This situation raises concerns about the security of third-party vendors, as they can often serve as weak links in a company's overall cybersecurity posture. Users and customers of Ericsson should be vigilant about potential phishing attempts or identity theft as a result of this breach.

Key Takeaways

Affected Systems: Employee and customer personal information
Timeline: Disclosed on April 28, 2025

Original Article Summary

Ericsson US reports a data breach after attackers hacked a service provider, exposing employee and customer information. Ericsson Inc., the U.S. branch of the Swedish telecom giant, disclosed a data breach after a service provider was hacked. The attack compromised the personal information of an unspecified number of employees and customers. “On April 28, 2025, […]

Impact

Employee and customer personal information

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Disclosed on April 28, 2025

Remediation

Not specified

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Phishing, Data Breach.

Read Original Article

Related Coverage

Romanian gets 5 years in prison for hacking Oregon govt network

BleepingComputer

A Romanian man was sentenced to 56 months in federal prison for hacking into a computer network used by the Oregon state government. This incident was part of a broader series of cyberattacks that targeted multiple victims across the United States. The hacker's activities included unauthorized access to sensitive governmental information, which raises concerns about the security of public sector networks. Such breaches can compromise not only data integrity but also the trust of citizens in their government. The case serves as a reminder of the ongoing risks posed by cybercriminals, particularly those operating from abroad.

May 28, 2026

New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails

SecurityWeek

Edamame, a startup based in France, has launched a new platform designed to monitor AI coding agents for potential issues like 'intent drift,' which refers to a deviation from their intended programming. The platform uses host telemetry and AI analysis to detect problems in real time, including secret theft and supply-chain attacks. This is significant as it addresses the growing concern over how AI systems can behave unpredictably and pose risks to software integrity and data security. By implementing such a system, companies can better protect their applications and sensitive information from malicious activities. This innovation could be crucial for organizations relying on AI-driven coding agents to ensure they operate safely and as intended.

May 28, 2026

Microsoft Condemns "Uncoordinated" Zero Day Disclosures

Infosecurity Magazine

Microsoft has raised concerns about the recent disclosure of several unpatched security vulnerabilities without prior notice. The company stated that these uncoordinated disclosures could put customers at significant risk by exposing them to potential attacks. This situation affects users of Microsoft's products, as they may not be aware of the vulnerabilities or have the necessary patches to protect their systems. The lack of coordinated communication from researchers or security firms can lead to confusion and increased vulnerability. Microsoft urges that such disclosures be handled responsibly to ensure that users are adequately protected and informed.

May 28, 2026

Gitea Vulnerability Exposed 30,000 Deployments to Attacks

SecurityWeek

A recently discovered security vulnerability in Gitea, a popular self-hosted Git service, has put around 30,000 deployments at risk. The flaw allows attackers to access private container images, which can lead to the exposure of sensitive information such as source code and user credentials. This vulnerability affects organizations that rely on Gitea for their development workflows, making it crucial for them to act swiftly to secure their systems. The situation raises concerns about the security of self-hosted services and the potential for misuse of exposed data. Companies using Gitea should prioritize patching their installations to mitigate this risk.

May 28, 2026

Carnival Cruise confirms data breach affecting nearly 6 million people

BleepingComputer

Carnival Corporation has confirmed a significant data breach that has impacted nearly 6 million individuals. The breach was linked to the ShinyHunters extortion gang, which claimed responsibility for the incident back in April 2026. The compromised data may include sensitive information, though specific details about what was leaked have not been disclosed. This incident raises concerns about the security of personal information within the cruise industry and the potential for identity theft among affected individuals. Carnival has stated that they are investigating the breach and will take necessary steps to enhance their cybersecurity measures moving forward.

May 28, 2026

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

The Hacker News

A new cyber campaign has emerged, targeting cryptocurrency firms through deceptive recruitment tactics and custom malware designed for macOS systems. Researchers from Wiz have identified this threat actor, known as JINX-0164, which employs social engineering to lure victims into downloading malicious software. The malware is tailored to exploit continuous integration and continuous deployment (CI/CD) infrastructures, increasing the risk of digital asset theft for affected organizations. As cryptocurrency firms often handle significant amounts of valuable digital assets, these attacks could lead to substantial financial losses and damage to their reputations. Companies in the crypto space need to be vigilant and enhance their security measures to protect against these sophisticated threats.

May 28, 2026