Checkmarx Confirms Data Stolen in Supply Chain Attack
Application security firm Checkmarx has confirmed a data breach resulting from a sophisticated supply chain attack. The incident reportedly led to the theft of customer data and portions of internal source code.
Event Summary
On April 29, 2026, application security company Checkmarx officially confirmed that it was the victim of a cyberattack. The breach was the result of a supply chain attack, a type of cyberattack where malicious actors compromise a less secure third-party partner or software to gain access to their ultimate target. In this case, attackers exploited a vulnerability in one of Checkmarx's vendors to infiltrate its internal systems.
Stolen Data Details
According to the company's initial statement, the compromised data includes sensitive information. The investigation has so far revealed that the following data types were accessed by unauthorized parties:
- Customer contact information (names, email addresses, company names)
- Portions of the company's internal source code repositories
- User account metadata
Checkmarx has stated that the investigation is ongoing and that they are working with cybersecurity experts to determine the full extent of the breach. The company has begun notifying affected customers directly.
Has your email been leaked? Check for free — results in seconds.
Check Now →What Affected Users Should Do
Checkmarx advises all customers to take precautionary measures to secure their accounts. It is highly recommended to reset your account passwords immediately and enable multi-factor authentication (MFA) if you haven't already. Users should also be vigilant against potential phishing emails that may impersonate Checkmarx and refer to this incident. To see if your data has been exposed in this or other incidents, you can use a Data Breach Search service. Staying informed about the latest security incidents is also crucial; you can follow current Data Breach News for updates.
Kaynak
https://www.securityweek.com/checkmarx-confirms-data-stolen-in-supply-chain-attack/