Supply-chain compromise affecting an organization (email marketing / web services)

Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts into websites using Brevo's service. The attack affected approximately 100,000 websites through the supply chain compromise of Brevo's infrastructure.

Sources

• Primary source on file. It names the organization, so it is not linked while this entry is anonymized.
• Upstream: Security news (RSS + Claude). The upstream record names the organization, so it is not linked here.
• Candidate incidents extracted from public security reporting; every entry links its article