Wesco Investigates Data Breach by ExfilSquad, Claims 2.6 Million Records Stolen

Wesco, a global supply chain giant, is investigating a cybersecurity incident following claims by the data extortion group ExfilSquad that it stole sensitive information from the company. The incident involves Wesco's cloud CRM environment, and the company has stated that it does not believe sensitive data is at risk. No business disruption has been reported, and operations continue normally. Wesco's investigation found no evidence of ransomware or malicious software on its systems. ExfilSquad claims to have stolen 2.6 million records, including personal information and CRM user profiles, and published the data after Wesco did not meet ransom demands. The breach method has not been disclosed, but researchers suggest that ExfilSquad has targeted misconfigured Microsoft Power Pages data tables in the past. Wesco may be using Microsoft Dynamics 365 for its CRM operations.

Key Points: • Wesco confirmed a cybersecurity incident involving its cloud CRM environment. • ExfilSquad claims to have stolen and published 2.6 million records from Wesco. • Wesco's investigation found no evidence of ransomware or sensitive data compromise.