Wesco confirms cloud CRM security incident after ExfilSquad data theft claim
This digest was compiled by AI from multiple sources — links to the originals are below.
Wesco, a Fortune 500 supply chain distributor, confirmed Monday it is investigating a cybersecurity incident involving its cloud CRM environment after data extortion group ExfilSquad claimed to have stolen 2.6 million records. The company stated there was no evidence of ransomware, no business disruption, and no risk to sensitive payment or financial data. The confirmation came after ExfilSquad published the data it claimed to have exfiltrated following a missed ransom deadline.
The Breach Claim
ExfilSquad, previously linked to breaches at Analog Devices and the UK’s Police National Legal Database, claimed to have stolen 2.6 million records from Wesco’s cloud CRM. The records allegedly include customer and employee PII, account data, CRM user profiles, credit identifiers, and authentication metadata. After Wesco declined ransom negotiations, the group published the data on its leak site. Researchers at Resecurity and VenariX note ExfilSquad has targeted improperly configured Microsoft Power Pages data tables in the past. Wesco, which may use Microsoft Dynamics 365, has not disclosed how the threat actor gained access.
Wesco’s Response
Vice President Jennifer Sniderman stated the incident was detected quickly and that Wesco worked with its cloud CRM vendor. No ransomware or malicious software was found, and there was no business disruption. The company, with 21,000 employees, over 700 locations in 50 countries, and $24 billion in sales last year, maintains that no sensitive customer or employee data is at risk. Wesco has not yet responded to further questions from BleepingComputer regarding ExfilSquad’s full claims.
What's Next
Wesco has yet to confirm the full scope of the breach or respond to ExfilSquad’s data leak. It remains unclear whether any sensitive data was actually exposed, and whether the incident could prompt regulatory scrutiny or customer notifications.
2 sources
Wesco confirms cloud CRM security incident after ExfilSquad data theft claim
