--- title: Wesco confirms security incident after ExfilSquad claims... description: Data extortion group ExfilSquad has claimed to have stolen 2.6 million records from Fortune 500 supply chain giant Wesco, including customer and employee PII,... canonical: https://daily.dev/posts/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft-xhz2lerqo twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Wesco confirms security incident after ExfilSquad claims data theft | daily.dev og:description: Data extortion group ExfilSquad has claimed to have stolen 2.6 million records from Fortune 500 supply chain giant Wesco, including customer and employee PII,... og:url: https://daily.dev/posts/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft-xhz2lerqo og:image: https://api.daily.dev/og/posts/XhZ2leRQO.png og:image:alt: Wesco confirms security incident after ExfilSquad claims data theft og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Wesco confirms security incident after ExfilSquad claims data theft **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary Data extortion group ExfilSquad has claimed to have stolen 2.6 million records from Fortune 500 supply chain giant Wesco, including customer and employee PII, CRM user profiles, credit and business identifiers, and authentication metadata. Wesco confirmed it is investigating a cybersecurity incident involving its cloud CRM environment, but stated it does not believe sensitive data such as payment card or financial account information is at risk and found no evidence of ransomware. After Wesco did not enter ransom negotiations, ExfilSquad published the allegedly stolen data. Researchers at Resecurity and VenariX have linked ExfilSquad's past attacks to misconfigured Microsoft Power Pages data tables, and public information suggests Wesco may use Microsoft Dynamics 365. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What attack vector does ExfilSquad use to breach organizations? ExfilSquad has been linked to targeting improperly configured Microsoft Power Pages data tables. Researchers at Resecurity and VenariX identified this pattern from examining the group's past activity. The group has claimed breaches at Analog Devices, the UK's Police National Legal Database, Newcastle University, and Wesco, in each case exfiltrating data and publishing it after ransom negotiation deadlines expire. _Teams hardening Microsoft Power Pages deployments track ExfilSquad TTPs and similar threat actor activity on daily.dev._ ## Similar posts on daily.dev - [ExfilSquad hackers leak info of over 100,000 UK police officers, staff](https://daily.dev/posts/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff-bpluulbsn) · BleepingComputer · 0 upvotes · 0 comments - [LexisNexis Legal & Professional confirms data breach](https://daily.dev/posts/lexisnexis-legal-professional-confirms-data-breach-zcir7glbd) · The Register · 0 upvotes · 0 comments - [Hacking group claims it breached Novo Nordisk and demanded $25m](https://daily.dev/posts/hacking-group-claims-it-breached-novo-nordisk-and-demanded-25m-igdejuix2) · The Next Web · 0 upvotes · 0 comments - [West Pharmaceutical says hackers stole data, encrypted systems](https://daily.dev/posts/west-pharmaceutical-says-hackers-stole-data-encrypted-systems-umsctpdcu) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#data-breach](https://daily.dev/tags/data-breach), [#data-exfiltration](https://daily.dev/tags/data-exfiltration) [View this post on daily.dev](https://daily.dev/posts/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft-xhz2lerqo) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Wesco confirms security incident after ExfilSquad claims data theft","url":"https://daily.dev/posts/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft-xhz2lerqo","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft-xhz2lerqo"},"datePublished":"2026-08-11T16:02:56.918Z","dateModified":"2026-08-11T16:03:20.873Z","description":"Data extortion group ExfilSquad has claimed to have stolen 2.6 million records from Fortune 500 supply chain giant Wesco, including customer and employee PII,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0d311b32f532fa232f09fc7964a64d85?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/0d311b32f532fa232f09fc7964a64d85?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft-xhz2lerqo","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"data-breach,data-exfiltration","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Wesco confirms security incident after ExfilSquad claims data theft"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/wesco-confirms-security-incident-after-exfilsquad-claims-data-theft-xhz2lerqo#faq","mainEntity":[{"@type":"Question","name":"What attack vector does ExfilSquad use to breach organizations?","acceptedAnswer":{"@type":"Answer","text":"ExfilSquad has been linked to targeting improperly configured Microsoft Power Pages data tables. Researchers at Resecurity and VenariX identified this pattern from examining the group's past activity. The group has claimed breaches at Analog Devices, the UK's Police National Legal Database, Newcastle University, and Wesco, in each case exfiltrating data and publishing it after ransom negotiation deadlines expire. Teams hardening Microsoft Power Pages deployments track ExfilSquad TTPs and similar threat actor activity on daily.dev."}}]} ```