# Over a Dozen Organizations Hit in Qubole Supply Chain Attack

Source: [SecurityWeek](https://www.securityweek.com/over-a-dozen-organizations-hit-in-qubole-supply-chain-attack/) · 2026-11-10 · Security
Page: https://themorning.dev/story/over-a-dozen-organizations-hit-in-qubole-supply-chain-attack-e7a8a4d2bbbe8652
Kind: security · Impact: high

## In brief

- Attackers used compromised Qubole IAM credentials to access customer environments.
- Stolen data reportedly includes customer files, secrets, keys, environment variables and credentials.
- Over a dozen organizations were reportedly hit by the supply chain attack.

## Why it matters

Developers using Qubole may have had secrets, keys and credentials exposed through a trusted third-party platform, so any exposed credentials should be treated as compromised.

## What to do

- Rotate any secrets, keys, credentials and environment variables that were accessible through Qubole.
- Review Qubole-related IAM and cloud access logs for suspicious activity.

## Timeline

- 2026-11-10: SecurityWeek reports over a dozen organizations hit in the Qubole supply chain attack

## Coverage

- [Over a Dozen Organizations Hit in Qubole Supply Chain Attack](https://www.securityweek.com/over-a-dozen-organizations-hit-in-qubole-supply-chain-attack/) — SecurityWeek, 2026-11-10

Tags: supply-chain, security, credentials, cloud, data-breach

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev