Supply-chain compromise affecting an organization (Software)

Unknown threat actors breached TeamUpdraft's website and obtained customer connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone, using them to plant backdoors on WordPress sites. The vendor behind UpdraftPlus, a plugin with over four million active installations, was compromised. This affected customers of the backup and remote management services.

Sources

• Primary source on file. It names the organization, so it is not linked while this entry is anonymized.
• Upstream: Security news (RSS + Claude). The upstream record names the organization, so it is not linked here.
• Candidate incidents extracted from public security reporting; every entry links its article