Supervisor

Wesco Anixter recognized as Fundraiser of the Year award winner by Chesterfield FC Community Trust. WCC | 1 hour ago NORTHAMPTON, MA / ACCESS Newswire / August 11, 2026 / Wesco Anixter has been recognized as Fundraiser of the Year 2026 by Chesterfield FC Community Trust (CFCCT), celebrating the generosity, energy and community spirit shown by colleagues across a year of fundraising and volunteering. The award recognizes the collective effort of Wesco Anixter colleagues, whose support helped raise funds, donate time and strengthen a local partnership focused on inclusion and opportunity. From the Family Fun Day to the Day of Caring, colleagues played an active role in turning good intentions into practical support for the Chesterfield community. Family Fun Day brought colleagues, families and supporters together to raise vital funds in a way that felt personal, inclusive and rooted in the local community. It reflected the strength of colleague-led fundraising, with people giving their time, ideas and enthusiasm to support a cause that matters, close to home. On the day, the team raised an incredible £2,091 which was matched 2:1 through Wesco Cares to £6,273. The Day of Caring built on that commitment, with colleagues volunteering their time to support community activity through CFCCT. Together, these moments show how fundraising and volunteering can create impact beyond a single donation, building stronger relationships and helping colleagues connect directly with the communities they support. Sophie Whitfield, Sustainability Leader, Electrical and Electronic Solutions EMEA said: "We are incredibly proud to be recognized as Fundraiser of the Year by CFCCT. This award really belongs to our colleagues, who have given their time, energy and generosity throughout the year. Whether through Family Fun Day, Day of Caring or the everyday support behind the scenes, their commitment helped strengthen a partnership that is about people, inclusion and creating meaningful local impact." Keith Jackson, Deputy Head of Community at Chesterfield FC Community Trust, said: "The Award for Wesco Anixter is absolutely deserved, as their colleagues have been incredibly supportive of Chesterfield FC Community Trust from the minute we started our partnership. The money raised on the Family Fun Day, Day of Caring and the sponsorship of the SEND Football project makes a huge difference and a life changing impact on our participants. The Wesco Anixter team actively supports us with their time and generosity and we are extremely grateful for it." During the awards ceremony, Sophie Whitfield, Sustainability Leader, Electrical and Electronic Solutions EMEA, also presented four awards to the SEND youth and adult football teams to celebrate their achievements. Wesco Anixter's support forms part of its wider commitment to community engagement, inclusion and social value through its Wesco Cares program. Wesco Anixter also extends its sincere thanks to the CFCCT for its valued partnership and shared commitment to making a meaningful difference in the communities where Stockhouse Publishing Ltd. live and work. About Wesco Anixter Wesco International (NYSE: WCC) builds, connects, powers and protects the world. Headquartered in Pittsburgh, Pennsylvania, Wesco is a FORTUNE 500(R) company with approximately $24 billion in annual sales in 2025 and a leading provider of business-to-business distribution, logistics services and supply chain solutions. Wesco offers a best-in-class product and services portfolio of Electrical and Electronic Solutions, Communications and Security Solutions, and Utility and Broadband Solutions. The Company employs approximately 21,000 people, partners with the industry's premier suppliers, and serves thousands of customers around the world. With millions of products, end-to-end supply chain services, and significant digital capabilities, Wesco provides innovative solutions to meet customer needs across commercial and industrial businesses, technology companies, telecommunications providers, and utilities. Wesco operates more than 700 sites, including distribution centers, fulfillment centers, and sales offices in approximately 50 countries, providing a local presence for customers and a global network to serve multi-location businesses and global corporations. About CFCCT Chesterfield FC Community Trust delivers life-changing programmes that support health, education, and wellbeing for people of all ages. From toddlers to older adults, from grassroots football to mental health support, its work is shaped by local need and driven by impact. Stockhouse Publishing Ltd. use the power of the Chesterfield FC badge to connect with its communities, create opportunity, and deliver over £5 million in social value each year.

Wesco cloud CRM data breach: ExfilSquad data theft and supply chain risks analyzed. Executive summary. On August 11, 2026, Wesco, a global supply chain and distribution company, confirmed it is investigating a cybersecurity incident following claims by the data extortion group ExfilSquad of data theft and public leakage. The incident centers on Wesco's cloud CRM environment, with the company stating that no business disruption occurred and no evidence of ransomware or other malware was found on internal IT systems. Wesco does not believe sensitive customer or employee data, including payment card and financial account information, is at risk. However, ExfilSquad claims to have exfiltrated and leaked 2.6 million records containing customer and employee personally identifiable information (PII), account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access-related information. The attack method appears to be data theft and extortion, not ransomware encryption, and is consistent with ExfilSquad's historical tactics. The incident has significant third-party risk implications for organizations with data held by Wesco, increasing the likelihood of downstream phishing, business email compromise, and fraud. No technical indicators of compromise (IOCs) have been published as of the report date. Technical information. The Wesco incident is a confirmed case of data theft extortion, with the threat actor ExfilSquad claiming responsibility. The attack targeted Wesco's cloud CRM environment, which public reporting suggests may be based on Microsoft Dynamics 365 and potentially involved misconfigured Microsoft Power Pages data tables. The company's official statements and independent technical analyses agree that no ransomware or other malware was detected on internal IT systems, and business operations were not disrupted. ExfilSquad is known for extortion-only operations, focusing on the exfiltration and public leakage of sensitive data rather than deploying ransomware for encryption. The group's typical attack lifecycle includes initial access via compromised credentials (obtained through infostealer logs, password reuse, or phishing), exploitation of exposed remote access or cloud application misconfigurations, discovery and collection of high-value data, staging and compression of data using legitimate archiving tools (such as 7z.exe, rar.exe, winrar.exe, tar, and makecab), and exfiltration over HTTPS to attacker-controlled cloud storage using tools like rclone, MEGAsync, FileZilla, WinSCP, curl, or PowerShell. Data is often sent to services such as MEGA, pCloud, Backblaze B2, or anonymous VPS endpoints, with exfiltration typically scheduled during off-hours to avoid detection. The technical evidence from all primary sources indicates that the attack was limited to the cloud CRM environment, with no confirmed compromise of on-premises infrastructure or lateral movement within Wesco's broader IT estate. The absence of ransomware or destructive malware, combined with the extortion group's public claims and leak-site activity, aligns with ExfilSquad's established tactics, techniques, and procedures (TTPs). MITRE ATT&CK Mapping for this incident includes: - Initial Access: Valid Accounts (T1078), Exploit Public-Facing Application (T1190) - Discovery: Account Discovery (T1087), Cloud Service Discovery (T1526) - Collection: Data from Information Repositories (T1213), Archive Collected Data (T1560) - Exfiltration: Exfiltration Over Web Service (T1567.002), Exfiltration to Cloud Storage (T1537) - Impact: Data Leak (T1537), Extortion (T1657) No malware was detected, and all data staging and exfiltration activities leveraged legitimate administrative tools, making detection more challenging for traditional endpoint security solutions. ExfilSquad has a documented history of targeting large organizations in the supply chain, education, and public sector verticals, including previous breaches at Analog Devices, the UK's Police National Legal Database, and Newcastle University. The group's focus on cloud environments and misconfigured data tables is consistent with the observed attack on Wesco. The sector-specific risk is elevated due to the nature of Wesco's business, which involves holding sensitive data for thousands of downstream partners and customers. The stolen data set reportedly includes customer lists, shipment details, project pricing, and contact information, all of which can be weaponized for business email compromise, invoice fraud, and spear phishing campaigns targeting Wesco's ecosystem. Affected versions & Timeline. The incident is limited to Wesco's cloud CRM environment, which public sources suggest may involve Microsoft Dynamics 365 and Microsoft Power Pages data tables. No specific software version or CVE has been associated with the breach as of the publication date. Timeline of key events: - August 7, 2026: Researchers report ExfilSquad targeting additional victims and distributing stolen data via torrents. - August 11, 2026: Wesco confirms investigation into a cloud CRM security incident after becoming aware of a third-party claim of CRM data exfiltration. - August 11, 2026: ExfilSquad claims the breach and publishes the allegedly stolen data after ransom negotiation deadlines expire. No regulatory filings or law enforcement advisories have been referenced in public sources as of August 11, 2026. Threat activity. ExfilSquad is a data extortion group specializing in the theft and public leakage of sensitive data from large organizations. The group's operations are characterized by stealthy data collection and exfiltration, followed by extortion attempts and public data leaks if ransom demands are not met. In the Wesco incident, the group claims to have exfiltrated 2.6 million records, including customer and employee PII, account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access-related information. The attack did not involve ransomware or destructive malware, and there was no reported business disruption. The group's tactics are consistent with previous campaigns, which have exploited misconfigured cloud environments and leveraged legitimate administrative tools for data staging and exfiltration. The incident poses significant third-party risk to organizations with data held by Wesco, as the stolen information can be used for downstream phishing, business email compromise, and fraud. The supply chain and distribution sector is particularly vulnerable to this type of attack due to the volume of sensitive partner and customer data held by companies like Wesco. Mitigation & workarounds. Mitigation efforts should prioritize the following actions, ordered by severity: Critical: Organizations with data held by Wesco should immediately assess their exposure and increase vigilance for targeted phishing, business email compromise, and fraud attempts leveraging stolen data. Security teams should review and update incident response plans to address third-party data breach scenarios. High: Review and harden cloud CRM configurations, especially for Microsoft Dynamics 365 and Microsoft Power Pages. Ensure that access controls, data table permissions, and authentication mechanisms are properly configured to prevent unauthorized access. High: Implement robust monitoring for anomalous access and data exfiltration activity in cloud environments. Leverage cloud-native security tools and logging to detect unusual data access patterns, large-scale exports, and off-hours activity. Medium: Conduct credential hygiene reviews, including forced password resets for users with access to sensitive cloud CRM data, and enable multi-factor authentication (MFA) wherever possible. Medium: Communicate with downstream partners and customers regarding the potential exposure of their data and provide guidance on recognizing and reporting phishing or fraud attempts. Low: Monitor public leak sites and threat intelligence feeds for evidence of your organization's data being exposed as part of the Wesco breach. Indicators of compromise. The following table contains indicators of compromise (IOCs) identified in public reporting as of August 11, 2026. These indicators are point-in-time and should be validated in your environment before enforcement. | Type | Indicator | Reported (date) | Source | | Domain | mallory[.]ai | 2026-08-11 | https://mallory.ai/stories/019ff1d1-40f3-7046-9d85-66ec4edfe32c | No additional technical IOCs (IP addresses, hashes, emails, etc.) were available in public sources at the time of writing. References. About rescana. Rescana provides a third-party risk management (TPRM) platform designed to help organizations identify, assess, and monitor risks arising from their vendor and partner ecosystem. Its platform enables continuous monitoring of third-party exposures, supports rapid incident response, and delivers actionable intelligence for supply chain and cloud security events. For questions about this report or to discuss your organization's third-party risk posture, contact Rescana at [email protected].

Wesco Anixter shortlisted for Spotlight North Award. The Wesco Anixter Rail team have been shortlisted for a Spotlight North Award in recognition of their commitment to delivering outstanding results for their customers. Their submission focused on the collaborative work completed with Alstom, where they successfully reduced packaging within Alstom's kitting process by developing and implementing a reusable packaging solution. This initiative not only delivered environmental and operational benefits for the customer but has since been adopted across additional projects, creating wider value beyond the original scope. The submission also highlighted how the team worked closely with Alstom to overcome weight restriction challenges associated with a 2BIN kitting solution. Through innovative thinking and a customer-focused approach, they developed practical solutions that maintained efficiency while ensuring compliance with operational requirements. Being shortlisted is a fantastic achievement and reflects the dedication, expertise and collaborative spirit of the Wesco Anixter Rail team. It is great recognition of the value they continue to deliver for their customers and the positive impact the industry can make through partnership, innovation and continuous improvement.