Kaseya VSA Data Breach
In July 2021, enterprise IT management and remote monitoring software provider Kaseya suffered a devastating supply chain ransomware attack executed by the REvil (Sodinokibi) cybercrime syndicate.
Exposed Data Types
5- IT infrastructure administrative credentials
- Client system configuration parameters
- Encrypted customer database records
- API authentication secrets
- MSP telemetry and agent logs
About This Breach
The threat actors weaponized multiple zero-day vulnerabilities in Kaseya VSA servers, bypassing authentication to deliver malicious ransomware payloads disguised as legitimate software updates. The incident cascaded through roughly 60 Managed Service Providers (MSPs), rapidly encrypting internal networks and client databases across more than 1,500 downstream businesses worldwide, culminating in an unprecedented $70 million ransom demand.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
