How SVigil Prevented a Massive Supply Chain Breach in Banking Infrastructure?

CloudSEK’s SVigil discovered exposed employee credentials for a third‑party communications provider on the dark web that granted access to the provider’s Central Portal and 32 cloud service accounts across AWS, GCP, and Azure. The breach exposed sensitive customer call recordings and transcripts, GCP service accounts with Owner/Editor privileges, USD 3M in credit balance, and the ability to send bulk messages to 50K+ users; the report details technical findings, business impact, and recommended mitigations (credential revocation, stronger IAM and MFA, EDR deployment, and securing cloud storage).