ThreatCluster

Logitech Data Leak Following Zero-Day Attack

First seen 2 Dec 2025, 18:33 UTC • •40

Article Content

1 / 3

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Logitech experienced a data leak due to a zero-day attack, impacting user data security. The incident has drawn attention from the US Senate, particularly Senator Ron Wyden, who has been advocating for better cybersecurity measures in the telecommunications sector. The Cybersecurity and Infrastructure Security Agency (CISA) has been urged to release a report on security vulnerabilities that remain unaddressed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 196d ago How this analysis works

More articles in this cluster (2)

Threat Graph

15 entities, 18 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Threat Actor (1)

Salt Typhoon

Technique (8)

Data Breach
Malware
Phishing
Supply Chain Attack
Worm
Zero-day Exploit
T1055 - Process Injection
T1195 - Supply Chain Compromise

Organization (2)

Doordash
Logitech

Malware (2)

IndonesianFoods
Lumma Stealer

Affected Platform (1)

Microsoft Edge

Tool (1)

Npm

Relationships

Salt Typhoon uses IndonesianFoods
Salt Typhoon uses Lumma Stealer
Salt Typhoon uses Npm
Salt Typhoon uses Data Breach
Salt Typhoon uses Malware
Salt Typhoon uses Phishing
Salt Typhoon uses Supply Chain Attack
Salt Typhoon uses Worm
Salt Typhoon targets Doordash
Salt Typhoon targets Logitech
IndonesianFoods targets Doordash
IndonesianFoods targets Logitech
Lumma Stealer targets Doordash
Lumma Stealer targets Logitech
Salt Typhoon related to Zero-day Exploit
Salt Typhoon related to T1055 - Process Injection
Salt Typhoon related to T1195 - Supply Chain Compromise
Salt Typhoon related to Microsoft Edge

Following this threat?

Track Salt Typhoon, IndonesianFoods and Doordash in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

China-Linked QTFY Group Targets Critical Infrastructure with Advanced Exploits The Joint Cybersecurity Advisory JCSA-20260826-01, released on August 26, 2026, details ongoing activities by the China-linked hacking group QTFY, attributed to Nanjing Xinjiuwei Network Technology Co. Active since 2018, QTFY employs platforms like QScan and QTRouter to exploit vulnerabilities in critical…

Critical RCE Vulnerability Discovered in TACACS+ Protocol A significant vulnerability has been identified in the TACACS+ protocol, allowing for pre-authentication remote code execution (RCE) attacks. This 33-year-old protocol, crucial for authentication in networking equipment, is widely used across large enterprises and ISPs. The vulnerability, detailed by Elttam, can be…