#BHUSA: 99% of Global 2000 Firms Have Recently Breached Vendors

SecurityScorecard’s report on Global 2000 supply chain cyber risk finds that 99% of top public companies use vendors with recent breaches, with 20% of their vendors breached in the past 15 months and many firms tied to dozens of breached suppliers. The study warns of concentration risk—where widely used technologies create single points of failure—notes that supply chain incidents cost 17x more to remediate than first-party breaches, and estimates total losses of $20–$80B over 15 months. Recommended actions include continuous external attack surface monitoring, identifying single points of failure, and automatically detecting new vendors.