[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f32k382jvdnrco":3,"$f2p74h7me28rz9":61},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"publishedAt":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":16,"affectedCount":16,"affectedCountStatus":17,"affectedCountLowerBound":18,"affectedCountUnit":19,"hasEnglishDescription":4,"contentLocale":20,"availableLocales":21,"translations":31,"severity":42,"dataClasses":43,"description":52,"seoTitle":53,"seoDescription":54,"logoUrl":55,"isVerified":4,"isSensitive":56,"isSpamList":56,"isMalware":56,"company":57},"6a452308a20f867c8ba8e782","sysco","Sysco 2026年数据泄露事件","sysco.com","2026-06-15T00:00:00.000Z","2026-06-28T15:57:29.000Z","2026-10-09T20:14:21.533Z","Third party breach","",[],2691852,"known",null,"unknown","zh",[22,23,20,24,25,26,27,28,29,30],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":32,"tr":33,"zh":34,"hi":35,"es":36,"ar":37,"fr":38,"bn":39,"pt":40,"ru":41},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},"Critical",[44,45,46,47,48,49,50,51],"Customer feedback","Email addresses","Employers","Job titles","Names","Phone numbers","Physical addresses","Usernames","\u003Cp>Sysco数据泄露事件发生于2026年6月，是一起高风险的企业及客户数据泄露事件，导致这家食品分销公司员工和客户关联的约2,691,852个不重复的电子邮件地址暴露。由于该记录同时包含客户反馈、雇主信息、职位、用户名和联系方式字段，因此不应将此次事件仅仅视为电子邮件地址泄露。这些信息可能被用于编写更具迷惑性的社会工程攻击消息，利用供应链、企业采购和客户支持等业务背景取信于收件人。\u003C\u002Fp> \u003Ch2>泄露的数据类型及风险\u003C\u002Fh2> \u003Cp>该记录中经核实的数据字段包括客户反馈、电子邮件地址、雇主信息、职位、完整姓名、电话号码、实际地址和用户名。经核实的数据类别不包括密码、支付卡、银行信息或身份证件，因此本说明未将这些内容列入泄露范围。如果同一人在其他企业系统中使用相似的标识符，泄露的用户名可能为针对性攻击尝试提供便利。雇主和职位信息也会增加针对特定岗位实施诈骗的风险。\u003C\u002Fp> \u003Ch2>食品分销与B2B沟通背景\u003C\u002Fh2> \u003Cp>Sysco客户和员工面临的首要风险，是虚假的供货、配送、发票或支持消息，让人误以为双方存在真实的业务往来。攻击者可能借助产品配送、订单变更、付款指示、客户满意度表单或账户更新请求等主题实施欺骗。消息中出现真实的公司名称、职位、电话号码或地址信息，并不能证明消息安全可靠。用户在采取任何行动前，应通过官方客户代表、已知电话号码或直接访问的门户网站进行核实。\u003C\u002Fp> \u003Ch2>客户反馈与企业岗位风险\u003C\u002Fh2> \u003Cp>对于企业用户，职位和雇主信息都具有重要意义。采购、财务、物流或客户服务岗位的人员可能成为虚假付款指令、供应商账户变更或紧急发货通知的目标。组织应通过另一条核实渠道确认付款信息变更，不应仅凭电子邮件就接受银行账户变更或供应商信息更新请求。虽然仅凭密码并不会给用户名带来风险，仍应监控身份验证日志。\u003C\u002Fp> \u003Ch2>已核实的范围与边界\u003C\u002Fh2> \u003Cp>由于该记录不包含密码，不应直接声称发生了密码泄露；不过，同一电子邮件地址可能在其他泄露事件中与某个密码关联。用户应为工作账户和个人账户分别设置不重复的密码，启用双因素身份验证，并退出未知会话。如果企业域名下的电子邮件地址受到影响，应检查身份提供商日志中的登录失败尝试、异常位置和新设备注册情况。\u003C\u002Fp> \u003Ch2>对机构的安全启示\u003C\u002Fh2> \u003Cp>在食品分销和供应链场景中，客户数据也可能影响运营安全。配送地址、客户反馈和联系方式可能被用于编造虚假发货、虚假退货或虚假支持情境。应提醒客户支持团队，泄露发生后，冒充代表进行联系的情况可能增多。还应明确告知客户哪些渠道属于官方渠道，以及如何核实紧急付款或配送路线变更请求。\u003C\u002Fp> \u003Ch2>必要的防范措施\u003C\u002Fh2> \u003Cp>Sysco数据泄露是一起大型企业数据事件，涉及客户和员工两方面的信息。受影响的用户应警惕虚假的供货、发票、配送和支持消息；组织则需要在付款信息变更、客户支持和身份验证流程中增加核实措施。最准确的处理方式，是将此次事件视为供应链和企业社会工程攻击风险，而非密码泄露事件。\u003C\u002Fp> \u003Cp>Sysco记录中的客户反馈可能为诈骗消息提供逼真的背景。攻击者可能谎称用户此前提出过投诉、对配送满意度有异议、对产品质量表示担忧，或提交过支持请求，借此要求用户提供更多信息。因此，客户和员工应通过官方渠道核实要求填写反馈表单、更新发货信息或更正发票的消息。组织也应提醒呼叫中心和支持团队留意冒充客户代表的人员。\u003C\u002Fp> \u003Cp>由于密码和支付信息未经核实，本记录的说明未将泄露范围扩展至这些字段。风险在于核心数据、企业岗位信息和客户联系数据可能被用于社会工程攻击。使用受影响域名的组织应监控登录失败尝试、异常会话和付款信息变更请求；对于通过电子邮件、电话及地址信息收到的请求，用户应增加一道核实步骤。\u003C\u002Fp>","Sysco 2026年数据泄露事件 (2.7 百万 已报告记录数)","Sysco 2026年数据泄露事件. 据报告，涉及2.7 百万条记录。 已报告的数据：客户反馈, 电子邮箱地址, 雇主。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fsysco_com.webp",false,{"name":58,"sector":59,"country":60,"website":9,"websiteArchiveUrl":14,"websiteStatus":14,"websiteCheckedAt":18},"Sysco","Food Distribution","United States",{"success":4,"breaches":62},[63,70,77,84],{"slug":64,"title":65,"companyName":66,"logoUrl":67,"breachDate":68,"affectedCount":18,"affectedCountStatus":69},"hmc-farms-2026","HMC Farms 数据泄露事件","HMC Farms","\u002Fuploads\u002Flogo\u002Fhmc-farms-official-logo.png","2026-06-05T00:00:00.000Z","not_disclosed",{"slug":71,"title":72,"companyName":73,"logoUrl":74,"breachDate":75,"affectedCount":76,"affectedCountStatus":17},"medela","Medela 数据泄露","Medela","\u002Fuploads\u002Flogo\u002Fmedela.webp","2026-09-07T00:00:00.000Z",423947,{"slug":78,"title":79,"companyName":80,"logoUrl":81,"breachDate":82,"affectedCount":83,"affectedCountStatus":17},"dustin-group-2026-data-security-incident","Dustin Group 2026年数据安全事件","Dustin Group AB (publ)","\u002Fuploads\u002Flogo\u002Fdustingroup_com-6aaab48e5041e3a842fe832a-e26a53490c4a5cbe.webp","2026-09-03T00:00:00.000Z",1062841,{"slug":85,"title":86,"companyName":87,"logoUrl":88,"breachDate":89,"affectedCount":90,"affectedCountStatus":17},"elekta-2026-data-breach","Elekta 2026年数据泄露事件","Elekta AB","\u002Fuploads\u002Flogo\u002Felekta-2026-veri-ihlali-afc72236a8ad.webp","2026-09-01T00:00:00.000Z",129576]