Technical Definition
Third-Party (Supply-Chain) Breach
A compromise that reaches you through a supplier, contractor or software dependency rather than through the platform itself.
By Crypto University Editorial
✦ Key Insight
Your exposure is not limited to the companies you chose — it extends to everyone they chose.
✕ Common Misconceptions
Trusting a message because it contains accurate personal details — leaked data makes that trivial. Also spreading identity documents across many platforms without considering where that data ends up.
Detailed Explanation
Exchanges and wallets rely on outside vendors for identity verification, customer support, analytics and code libraries. A breach at any of them can expose customer data or inject malicious code, even when the platform's own systems are intact. Leaked KYC data in particular fuels targeted phishing and physical extortion.
In Practice
“A support vendor is breached and customer names, addresses and account balances are leaked. Affected users receive convincing phishing messages quoting real account details.”