August 2025 marked yet another consequential month in cybersecurity history. Coordinated supply chain attacks, sophisticated social engineering, and large-scale breaches across critical sectors defined the month. The wave of Salesforce compromises impacting Fortune 500 companies, ransomware strikes on telecom and aviation, cascading vendor-related breaches in healthcare, and credit bureau exposures revealed a new era: attackers no longer focus on single organizations — they exploit trusted platforms and vendor ecosystems to cause industry-wide disruption.

1. Manpower Franchise Breach Impacts 145,000 Workers

• Impact: 145,000 individuals, sensitive ID and employment records
  
  

• Timeline: Breach window Dec 2024–Jan 12, 2025; discovered July; disclosed Aug 15, 2025
  
  

A Manpower franchise in Lansing, Michigan confirmed a data breach affecting approximately 145,000 individuals. Stolen data included Social Security cards, passports, payroll details, and background checks. Although the intrusion ended in January, disclosure came seven months later — raising regulatory concerns about breach reporting delays. The case underscores how staffing agencies are prime ransomware targets given their extensive, highly sensitive worker databases.

2. Air France and KLM Third-Party Breach

• Impact: Passenger travel and account details
  
  

• Timeline: Disclosed Aug 8, 2025
  
  

Air France and KLM jointly disclosed a breach via a compromised customer service platform used by both carriers. Attackers accessed personal data including passenger names, booking references, and contact information. This marked the fifth airline cyberattack in just two months, highlighting the risks of shared platforms in aviation where one vendor compromise can cascade across multiple global carriers.

3. Orange SA Ransomware Attack

• Impact: French business customers, leaked corporate communications and network data
  
  

• Timeline: Attack detected Jul 25; complaint filed Jul 28; data published on dark-web Aug 25
  
  

France’s largest telecom provider, Orange SA, reported a ransomware attack that disrupted business services and led to the leak of sensitive enterprise data. Stolen records included corporate communications, network configuration details, and infrastructure data. The attack spotlighted the vulnerability of telecom infrastructure — a critical backbone for national and commercial security.

4. Healthcare Breaches Surge

• Impact: Dozens of breaches in August; millions of records exposed across 2025
  
  

Healthcare remained under siege. August continued the sharp rise in attacks: in July, the U.S. HHS reported 48 new breaches, and August added dozens more. These ranged from ransomware to vendor IT service compromises, often spreading laterally across hospital networks. The cumulative total for 2025 has already surpassed previous records, putting millions of patient records at risk.

5. Google Caught in Salesforce Attack Wave

• Impact: Salesforce-integrated support and operational data
  
  

• Timeline: Confirmed Aug 2025
  
  

Google disclosed its Salesforce environment had been compromised in a broader coordinated campaign. Threat actors bypassed direct defenses by abusing OAuth tokens and third-party Salesforce integrations. Exposed data included customer support logs and operational records. The case highlights that even the most security-mature enterprises remain vulnerable when attackers exploit trusted platforms rather than the organization directly.

6. 16 Billion Credentials Compiled (June discovery, August fallout)

• Impact: 16B usernames, passwords, and tokens across major platforms
  
  

• Timeline: Compiled and discovered Jun 20, 2025; actively circulated Aug 2025
  
  

Researchers uncovered one of the largest credential compilations in history — over 16 billion logins from platforms including Google, Apple, Facebook, and government services. Although discovered in June, August saw heavy circulation of the dataset in underground markets, fueling fresh identity theft and account takeover campaigns. The breach illustrates the industrial scale of credential-harvesting supply chain malware.

7. TransUnion Credit Bureau Breach

• Impact: 4.4M Americans’ personal data exposed, including 377,000 Texans
  
  

• Timeline: Breach via third-party app Aug 28, 2025
  
  

Credit reporting agency TransUnion disclosed a major breach through a third-party application that exposed sensitive personal data, including Social Security numbers. With more than 4.4 million affected, the incident represents one of the largest credit bureau breaches since Equifax. Regulators urged consumers to freeze credit files and monitor for fraud, underscoring the systemic risk when core financial identity providers are compromised.

8. Wealthsimple Supply Chain Attack

• Impact: Customer personal information exposed; no funds lost
  
  

• Timeline: Disclosed Aug 30, 2025
  
  

Canadian fintech Wealthsimple revealed a supply chain breach after a trusted third-party software package was compromised. While no accounts or funds were accessed, customer personal information was exposed. The incident highlights how even modern, digital-native fintechs are vulnerable to upstream vendor risks — and how financial services are prime targets for supply chain infiltration.

9. iiNet (Australia) Customer Data Breach

• Impact: 280,000 email addresses, 20,000 landline numbers, 10,000 usernames, 1,700 modem setup passwords
  
  

• Timeline: Confirmed Aug 16, 2025
  
  

Australian ISP iiNet, part of TPG Telecom, confirmed attackers used stolen employee credentials to access its order management system. The breach exposed customer email addresses, phone numbers, and account credentials. Though no financial data was taken, the compromise of modem setup details raises concerns about potential follow-on exploitation of customer home networks.

10. Intel “Intel Outside” Internal Exposure

• Impact: 270,000 employee records exposed (names, addresses, job details, phone numbers)
  
  

• Timeline: Vulnerabilities patched Feb 2025; exposure disclosed publicly Aug 2025
  
  

A researcher disclosed that an Intel internal business-card ordering portal had inadvertently exposed data on 270,000 employees. Although Intel patched the flaw earlier in the year, the public disclosure in August drew attention to internal application security gaps — especially when employee PII at this scale is accessible. While not an active breach, the exposure reinforces that sensitive data risks extend beyond customer-facing systems.

The New Era of Coordinated Cyber Warfare

August’s incidents show how cybercrime has shifted from isolated events to systemic campaigns targeting entire industries. The Salesforce wave that struck Google, Allianz Life, and global airlines reveals how one vendor compromise can ripple through multiple Fortune 500s. Healthcare’s multi-breach month shows cascading third-party risks across an entire national sector. Credit bureau and fintech incidents (TransUnion, Wealthsimple) demonstrate how financial identity and digital banking ecosystems are now front-line targets.

Attackers are now optimizing for scale, leverage, and shared dependencies. This is cyber warfare through the supply chain — where exploiting a common vendor or platform delivers impact across dozens of high-value targets simultaneously.

Strategic Implications for Vendor Risk Management

Every major breach in August tied back to third-party or platform compromise. Key takeaways for organizations:

• Move beyond questionnaires: Static, point-in-time assessments miss evolving threats.
  
  

• Adopt continuous monitoring: Vendor ecosystems need 24/7 visibility.
  
  

• Leverage real-time intelligence: Rapid alerts from shared platforms can prevent cascading failures.
  
  

• Automate response: Manual processes are too slow for coordinated attacks.
  
  

The healthcare, Salesforce, and financial services incidents prove vendor risk is now central to cybersecurity. Protecting your enterprise means protecting your entire ecosystem.

How Findings Can Help

Findings delivers the real-time vendor visibility, automated risk scoring, and supply chain monitoring needed in today’s coordinated threat landscape. Our platform provides:

• Continuous vendor monitoring
  
  

• Automated compliance mapping
  
  

• Instant alerts on vendor security incidents
  
  

Don’t wait until your vendors’ weaknesses become your breach. The August 2025 events show that no company is immune. Strengthen your vendor risk management now with Findings.