ThreatCluster

Logitech Data Leak Following Zero-Day Attack

First seen 2 Dec 2025, 18:33 UTC • •40

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Logitech experienced a data leak due to a zero-day attack, impacting user data security. The incident has drawn attention from the US Senate, particularly Senator Ron Wyden, who has been advocating for better cybersecurity measures in the telecommunications sector. The Cybersecurity and Infrastructure Security Agency (CISA) has been urged to release a report on security vulnerabilities that remain unaddressed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 241d ago How this analysis works

More articles in this cluster (2)

Threat Graph

15 entities, 18 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Threat Actor (1)

Salt Typhoon

Technique (8)

Data Breach
Malware
Phishing
Supply Chain Attack
Worm
Zero-day Exploit
T1055 - Process Injection
T1195 - Supply Chain Compromise

Organization (2)

Doordash
Logitech

Malware (2)

IndonesianFoods
Lumma Stealer

Affected Platform (1)

Microsoft Edge

Tool (1)

Npm

Relationships

Salt Typhoon uses IndonesianFoods
Salt Typhoon uses Lumma Stealer
Salt Typhoon uses Npm
Salt Typhoon uses Data Breach
Salt Typhoon uses Malware
Salt Typhoon uses Phishing
Salt Typhoon uses Supply Chain Attack
Salt Typhoon uses Worm
Salt Typhoon targets Doordash
Salt Typhoon targets Logitech
IndonesianFoods targets Doordash
IndonesianFoods targets Logitech
Lumma Stealer targets Doordash
Lumma Stealer targets Logitech
Salt Typhoon related to Zero-day Exploit
Salt Typhoon related to T1055 - Process Injection
Salt Typhoon related to T1195 - Supply Chain Compromise
Salt Typhoon related to Microsoft Edge

Following this threat?

Track Salt Typhoon, IndonesianFoods and Doordash in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

CISA's CI Fortify Initiative Enhances Resilience for Critical Infrastructure The CI Fortify initiative, launched by CISA and international partners, aims to ensure critical infrastructure can maintain essential services during cyber attacks. This initiative comes in response to recent attacks on U.S. water systems attributed to Iranian hackers, which highlighted vulnerabilities in operational…

Growing Cyber Risks from IT-OT Convergence Threaten Critical Infrastructure As the convergence of IT and operational technology (OT) accelerates, cybersecurity experts warn of increasing cyber risks to critical infrastructure. During the Cyber Leaders Exchange 2026, experts highlighted how attackers are now capable of operational sabotage, including modifying programmable logic controller…