ReportedReported by fewer than three independent publishers, with no official finding.
Should entities be required to disclose the name of a vendor if the breach was at the vendor’s?
If this were a poll, DataBreaches would vote “yes.” DataBreaches has never really understood why breach notification letters do not have to reveal the name of a business associate or vendor if the breach occurred on...
DII-2025-004112 sources ↓
What happened
Not publicly disclosed.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.
DataBreaches.net
Should entities be required to disclose the name of a vendor if the breach was at the vendor’s?
10 December 2025