Supply Chain Cyber Attacks Hit 26% of Firms in Past Year

Supplychaindigital · Jul 23, 2026 · 745 words · By Sarah Brooks

Cybersecurity Risk Management Zero Trust Architecture Supply Chain Vulnerability

headphones Listen to the eFinder podcast briefing

Generate a natural audio summary of this story

Daily briefing

What to know about Cybersecurity Risk Management

The article discusses the risks of supply chain cyber attacks, citing a report from Databarracks that indicates 26% of firms experienced such breaches in the past year. It highlights the gap between threat awareness and action, emphasizing the need for increased visibility and a zero-trust approach to security.

Propaganda risk 20%

Claims checked 7

Techniques found 1

Topics 3

Coverage spectrum

Coverage gap: Low Right coverage

Left14%

Center86%

Right0%

7 sources compared across this story cluster. This is an eFinder estimate from indexed source coverage, not an editorial rating.

What happened

Supply Chain Cyber Attacks Hit 26% of Firms in Past Year Supply chain leaders require more visibility than ever.

Why it matters

One in four (26%) of businesses have experienced a security breach from their supply chain over the past year.

Common ground

These figures, from Databarracks’ Data Health Check 2026 report, highlight an obvious disconnect between threat awareness and operational action.

Perspective signals

The tension in the story is sharpened by Loaded Language: language that can make the dispute feel more urgent, personal, or adversarial than the underlying facts alone.

Follow-up questions

What new context would change how readers understand this Cybersecurity Risk Management story?
What evidence would most clearly confirm or weaken the claim that 23% of respondents rank supply chain vulnerabilities as a top three challenge over the next five years?
How does this story connect Cybersecurity Risk Management with Zero Trust Architecture over the next few days?

open_in_new Read the original article: https://supplychaindigital.com/news/supply-chain-cyber-attacks-hit-26-of-firms-i…

analyticsAnalysis

20%

Propaganda Score

confidence: 95%

Minor concerns. Some persuasive language detected, but largely factual.

psychologyPropaganda Techniques Detected

eFinder identified 1 propaganda technique in this article. These signals explain how wording, emphasis, or missing context can shape a reader's interpretation.

warning

Loaded Language 80% confidence

Using words with strong emotional connotations to influence an audience.

Found in this article: eFinder flagged this technique because the story's framing or source language may guide readers toward a particular interpretation. Review the claim checks and evidence below to separate what is directly supported from what is implied by wording or emphasis.

Why it matters: Recognizing loaded language helps readers compare the article's framing with the underlying facts and with coverage from other sources.

fact_checkClaims Checked

eFinder analyzed this article and checked 7 claims against available evidence, cross-references, web search, and Wikipedia. Here is what the fact-checking layer found.

info Single Source 4

verified Verified By Reference 2

check_circle Corroborated 1

info

Claim 1: “23% of respondents rank supply chain vulnerabilities as a top three challenge over the next five years”

SINGLE SOURCE

One web search result explicitly states that supply chain vulnerabilities are cited by 23% of respondents as a top three challenge over the next five years. No other independent source corroborates this specific figure.

menu_book

wikipedia NEUTRAL — George Walker Bush (born July 6, 1946) is an American former politician, businessman, and former United States Air Force officer who was the 43rd president of the United States, serving from 2001 to 2…
https://en.wikipedia.org/wiki/George_W._Bush

menu_book

wikipedia NEUTRAL — Kaspersky Lab (; Russian: Лаборатория Касперского, romanized: Laboratoriya Kasperskogo) is a Russian multinational cybersecurity and anti-virus provider company headquartered in Moscow, Russia. It was…
https://en.wikipedia.org/wiki/Kaspersky_Lab

menu_book

wikipedia NEUTRAL — In commerce, supply chain management (SCM) deals with a system of procurement (purchasing raw materials/components), operations management, logistics and marketing channels, through which raw material…
https://en.wikipedia.org/wiki/Supply_chain_management

+ 3 more evidence sources

info

Claim 2: “26% of firms cite “dependence on suppliers” as a primary barrier to improving overall operational resilience.”

SINGLE SOURCE

The evidence provided discusses the general economics of supplier dependence and the DORA act, but does not mention the specific statistic that 26% of firms cite dependence on suppliers as a primary barrier.

travel_explore

web search NEUTRAL — Supplier dependence carries hidden costs that rarely appear explicitly on financial statements. These include the cost of rigidity in sourcing, the inability to pivot quickly in response to market cha…
https://www.linkedin.com/pulse/economics-supplier-dependence…

travel_explore

web search NEUTRAL — In Europe, the Digital Operational Resilience Act (DORA) is due to come into force early next year seeking to shore up the financial services against the ever increasing cyber risk.Business continuity…
https://www.thestack.technology/operational-resiliency-dora-…

travel_explore

web search NEUTRAL — Downloadable! Previous research on supply chain dependence has predominantly focused on large firms, leaving a significant gap in the literature regarding small and medium-sized enterprises (SMEs), an…
https://ideas.repec.org/a/gam/jsusta/v17y2025i3p1302-d158445…

verified

Claim 3: “48% of IT decision-makers admit to working with suppliers despite known resilience or security concerns”

VERIFIED BY REFERENCE

The provided evidence for this claim consists of generic Wikipedia entries about the number 48 and the definition of IT, with no mention of the specific statistic regarding IT decision-makers and risky suppliers.

menu_book

wikipedia NEUTRAL — Information technology (IT) is the study or use of computers, telecommunication systems and other devices to create, process, store, retrieve and transmit information. While the term is commonly used …
https://en.wikipedia.org/wiki/Information_technology

menu_book

wikipedia NEUTRAL — It or IT may refer to: It (pronoun), in English Information technology
https://en.wikipedia.org/wiki/It

menu_book

wikipedia NEUTRAL — The IT Crowd is a British television sitcom originally broadcast by Channel 4, created, written, and directed by Graham Linehan, produced by Ash Atalla and starring Chris O'Dowd, Richard Ayoade, Kathe…
https://en.wikipedia.org/wiki/The_IT_Crowd

+ 3 more evidence sources

check_circle

Claim 4: “These figures, from Databarracks’ Data Health Check 2026 report”

CORROBORATED

Multiple independent web search results confirm that Databarracks published a report titled 'Data Health Check 2026'.

travel_explore

web search NEUTRAL — Welcome to the 2026 Databarracks Data Health Check – the definitive report on the state of IT resilience in the UK. Download the report to benchmark your organisation against 500 of your peers and dis…
https://www.databarracks.com/resources/data-health-check-202…

travel_explore

web search NEUTRAL — Download the full report: Data Health Check 2026 – Databarracks.The Data Health Check 2026 arrives after a year of high-profile cyber attacks across the UK, affecting major organisations including M&S…
https://www.databarracks.com/blog/the-state-of-resilience-in…

travel_explore

web search NEUTRAL — Reports and publications from Databarracks. Data Health Check 2026.
https://cybersecuritystatistic.com/vendors/databarracks

info

Claim 5: “AI-driven threats (46%) and ransomware (26%) [rank as top three challenges over the next five years]”

SINGLE SOURCE

The same web search result that supports claim 4 also mentions AI-driven cyber threats (46%) and ransomware (26%) as top challenges. However, no other independent source confirms these specific percentages.

travel_explore

web search NEUTRAL — The ransomware groups defining 2026 do not operate the way most organizations still prepare for. Learn their tactics and how to protect your data.
https://www.linkedin.com/pulse/3-tactics-powering-2026s-most…

travel_explore

web search NEUTRAL — Notably, despite ranking AI systems as their top security concern, 20.4% of respondents rated employees leaking sensitive data into public LLMs as a low or extremely low risk, revealing a significant …
https://www.bitdefender.com/en-us/news/cybersecurity-profess…

travel_explore

web search NEUTRAL — fewer than 20 percent of respondents reported orgasming from penetration...
https://www.tandfonline.com/doi/abs/10.1080/0092623X.2017.13…

info

Claim 6: “One in four (26%) of businesses have experienced a security breach from their supply chain over the past year.”

SINGLE SOURCE

While one web search result mentions 'One in Four Businesses Hit by Supply Chain Cyber Incidents', the specific percentage (26%) is not corroborated by a second independent source. The other results are generic Wikipedia entries about the number 26.

menu_book

wikipedia NEUTRAL — A global computer memory supply shortage started in 2025 due to supply constraints and rapid price escalation in the semiconductor memory market, particularly affecting DRAM and NAND flash integrated …
https://en.wikipedia.org/wiki/2025–present_global_memory_sup…

menu_book

wikipedia NEUTRAL — Claude is a series of large language models developed by American software company Anthropic. Claude was released as an AI-based chatbot in March 2023. It is also used in AI-assisted software developm…
https://en.wikipedia.org/wiki/Claude_(AI)

menu_book

wikipedia NEUTRAL — A supply chain attack is a cyber-attack that seeks to damage an organization by targeting less secure elements in the supply chain. A supply chain attack can occur in any industry, from the financial …
https://en.wikipedia.org/wiki/Supply_chain_attack

+ 3 more evidence sources

verified

Claim 7: “Organisations that knowingly work with risky suppliers are over four times as likely to suffer a third-party cyber incident (43% vs 10%).”

VERIFIED BY REFERENCE

The provided evidence consists of generic definitions of 'Organization' from Wikipedia and unrelated search results about nonprofits in Washington state. No evidence supports the specific 43% vs 10% statistic.

menu_book

wikipedia NEUTRAL — An organization or organisation (Commonwealth English; see spelling differences) is an entity—such as a company, or corporation or an institution (formal organization), or an association—comprising on…
https://en.wikipedia.org/wiki/Organization

menu_book

wikipedia NEUTRAL — An international organization, also known as an international institution or intergovernmental organization (IGO), is an association of states established by a treaty or other type of instrument gover…
https://en.wikipedia.org/wiki/International_organization

menu_book

wikipedia NEUTRAL — A nonprofit organization (NPO), also known as a nonbusiness entity, nonprofit institution, not-for-profit organization (NFPO), or simply nonprofit, is a non-governmental entity that operates for a col…
https://en.wikipedia.org/wiki/Nonprofit_organization

+ 3 more evidence sources

info Disclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.