// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Checkmarx
Breach Record

Checkmarx

DISCLOSED 2026-04-29 · SUPPLY CHAIN

Checkmarx confirmed that a supply chain attack on its KICS open source project resulted in data theft. The incident occurred last month. No further details on the nature of the stolen data or the attack method were provided.

The record

What we know

Disclosed
2026-04-29
Attack vector
Supply Chain
Sector
cybersecurity
Domain
checkmarx.com
Sources

Cited reporting

↗ www.securityweek.com (2026-04-29)
Similar vector · recent

Other supply chain breaches on file

Melbourne International Film Festival · 2026-06-01 Charter Communications · 2026-05-31 Oncology Institute · 2026-05-29 Oncology Institute · 2026-05-28 Trump Mobile · 2026-05-28 Oncology Institute · 2026-05-27 The Oncology Institute · 2026-05-26 Oncology Institute · 2026-05-25

This page is the permanent ColdRecon entry for the Checkmarx disclosure. It updates if new public reporting emerges. All tracked breaches →

Checkmarx just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →