Ericsson US Confirms Third-Party Breach
Ericsson Inc., the American arm of Swedish telecommunications equipment maker Ericsson, disclosed today that attackers breached one of its service providers and accessed sensitive data. The company announced the incident on March 9, 2026, confirming that the breach originated from a compromised third-party vendor rather than Ericsson's own systems.
The attackers successfully infiltrated the service provider's infrastructure and extracted data belonging to both Ericsson employees and customers. Ericsson hasn't specified which service provider was compromised or provided details about the attack method used.
Employee and Customer Data Compromised
The breach impacted an undisclosed number of Ericsson employees and customers, though the company hasn't released specific figures. Ericsson operates as a major supplier of telecommunications infrastructure and services to carriers across the United States.
The stolen data's exact nature remains unclear, as Ericsson hasn't detailed what types of information the attackers accessed. The company serves numerous telecommunications providers and enterprise customers throughout the U.S. market.
Supply Chain Attack Highlights Vendor Risk
This incident represents another supply chain attack where cybercriminals targeted a less-secured third-party provider to reach their ultimate target. The breach demonstrates the ongoing challenge companies face in securing their extended vendor ecosystems.
Ericsson hasn't announced specific remediation steps or indicated whether law enforcement agencies are investigating the incident. The company also hasn't provided a timeline for when the breach occurred or how long attackers maintained access to the compromised systems.
