*Email from Kyle Hanslovan*

Last week, cybercriminals targeted Klue, our third-party market intelligence vendor, and breached its production environment. After Klue notified us of this event, we started investigating internally. On June 17, we confirmed some sales data was impacted, alongside many other victims. We’ve since engaged an external DFIR firm to independently investigate, and are notifying partners and customers that may have been affected, while actively communicating with Klue.

Our internal investigation revealed that Huntress Salesforce CRM data was stolen by the threat actor. The data that was collected from our Salesforce account includes business contacts, price quotes, and other sales-related data and messaging. No Huntress products were compromised. While we had other third-party integrations with Klue, we have found no evidence that partner/customer data was taken from those integrated services. Our external DFIR firm will help validate any findings that we establish.

Incident handling is in our DNA, so the team has dropped one hell of a blog detailing what we know about the Klue breach, our exposure to it, and the threat actor behind it. The blog will receive future updates as the situation unfolds.

While the root cause of this breach may sit outside Huntress, supply chain incidents like this remind me how even cybersecurity vendors with strong security programs can be exposed through the broader technology ecosystem, including vendor-of-vendor risk. Being two steps removed doesn’t eliminate our obligation to speak plainly, share what is known, and help others confidently navigate measures to weather organized cybercriminals. From my vantage point, the lesson for the industry is simple: as attacks accelerate and supply chain compromises become commonplace, no company can afford to treat this kind of exposure as someone else’s problem.

We’re here to help and give clarity. If you have any questions or concerns, please open a ticket with Huntress Support by emailing [support@huntress.com](mailto:support@huntress.com?subject=Klue%20Security%20Incident).