Wesco, a global supply chain and distribution company, has confirmed it is investigating a cybersecurity incident involving its cloud CRM environment. The confirmation follows claims by the data extortion group ExfilSquad, which alleged it had stolen sensitive data from Wesco and subsequently published it on its data leak site.
Jennifer Sniderman, Wesco's Vice President of Corporate Communications, stated that the company is aware of ExfilSquad's claim of CRM data exfiltration. Wesco has collaborated with its cloud CRM vendor on the matter and currently believes there is no risk to sensitive data. The company also reported no business disruption and that all operations are continuing as normal.
Wesco indicated that the incident was detected quickly, and its subsequent investigation found no evidence of ransomware or other malicious software on its IT systems. The company does not believe that payment card information, financial account information, or other sensitive customer or employee data is at risk.
ExfilSquad, a group known for past data breaches affecting entities such as Analog Devices, the UK's Police National Legal Database, and Newcastle University, claimed to have stolen 2.6 million records from Wesco. The group alleged the stolen data included customer and employee personally identifiable information (PII), account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access information. After Wesco reportedly did not engage in ransom negotiations by the group's deadline, ExfilSquad published the alleged data.
While Wesco has not publicly disclosed the method of breach, cybersecurity researchers at Resecurity and VenariX, who have examined ExfilSquad's activities, indicate that the threat actor has previously targeted improperly configured Microsoft Power Pages data tables. Publicly available information suggests Wesco may utilize Microsoft Dynamics 365.
Wesco is a Fortune 500 company with approximately 21,000 employees and over 700 distribution centers, fulfillment centers, and sales offices across nearly 50 countries. The company reported approximately $24 billion in sales last year, distributing electrical, electronic, communications, security, utility, and broadband products, alongside providing logistics and supply chain services.
