Associate Engineer

Wesco Named a finalist in the 2026 Blackbaud Impact Awards. WCC | 1 hour ago Wesco Named a Silo Buster Award Finalist PITTSBURGH, PA / ACCESS Newswire / August 13, 2026 / Stockhouse Publishing Ltd. is proud to announce that Wesco has been named a finalist in the 2026 Blackbaud Impact Awards, which celebrates outstanding organizations and leaders who are advancing their missions, strengthening their communities, and achieving extraordinary results with technology from Blackbaud, the world's leading provider of AI-powered solutions for social impact. Presented by Blackbaud, the world's leading provider of AI-powered solutions for social impact, the awards recognize changemakers across the nonprofit, education, healthcare, foundation, and corporate social responsibility sectors who are creating meaningful impact in their communities and around the world. Wesco was named a finalist in the 2026 Blackbaud Impact Awards' Silo Buster category, which recognizes organizations that break down barriers, foster collaboration and drive greater impact through teamwork and innovation. Wesco was recognized for its efforts to unite employees across regions, functions and business groups through Wesco Cares, creating a more connected approach to giving, volunteerism and community impact. By bringing together teams around a shared purpose and leveraging technology to expand participation and measure outcomes, Wesco has strengthened employee engagement while increasing support for nonprofits and communities around the world. "At Wesco, we believe our greatest impact comes when we work together," said John Engel, Chairman, President and Chief Executive Officer. "This finalist recognition reflects the dedication of employees across our company who have embraced opportunities to support their communities and each other through Wesco Cares. We are honored to be recognized by Blackbaud and proud of what our teams have accomplished together." For more than four decades, Blackbaud has partnered with organizations across the social impact ecosystem-including nonprofits, healthcare organizations, educational institutions, foundations, and companies dedicated to doing good. The Blackbaud Impact Awards shine a spotlight on customers that are embracing innovation, breaking down barriers, and delivering measurable outcomes for the people and causes they serve. "The stories behind this year's finalists highlight the incredible ingenuity, resilience, and passion that define the social impact community," said Todd Lant, chief customer officer, Blackbaud. "Across sectors and geographies, these organizations are finding innovative ways to solve challenges, strengthen connections, and create lasting change. We're honored to celebrate their achievements and the impact they're making every day." The Blackbaud Impact Awards continue to grow as a global celebration of customer excellence. The 2026 finalists represent a diverse group of organizations and leaders from around the globe who are transforming how social impact work is delivered. Finalists were selected fromnominations spanning multiple sectors, regions, and award categories, reflecting the breadth and scale of the Blackbaud customer community worldwide. Winners of the 2026 Blackbaud Impact Awards will be announced on August 18, 2026. Blackbaud will continue the celebration throughout the year, including award presentations and recognition at bbcon 2026 in Columbus, Ohio; London, England; and Sydney, Australia. To learn more about the Blackbaud Impact Awards, view finalist profiles, and stay informed about the winner announcement, visit blackbaud.com/impact-awards. About Wesco Wesco International (NYSE:WCC) builds, connects, powers and protects the world. Headquartered in Pittsburgh, Pennsylvania, Wesco is a FORTUNE 500(R) company with approximately $24 billion in annual sales in 2025 and a leading provider of business-to-business distribution, logistics services and supply chain solutions. Wesco offers a best-in-class product and services portfolio of Electrical and Electronic Solutions, Communications and Security Solutions, and Utility and Broadband Solutions. The Company employs approximately 21,000 people, partners with the industry's premier suppliers, and serves thousands of customers around the world. With millions of products, end-to-end supply chain services, and significant digital capabilities, Wesco provides innovative solutions to meet customer needs across commercial and industrial businesses, technology companies, telecommunications providers, and utilities. Wesco operates more than 700 sites, including distribution centers, fulfillment centers, and sales offices in approximately 50 countries, providing a local presence for customers and a global network to serve multi-location businesses and global corporations. About Blackbaud Blackbaud (NASDAQ:BLKB) is the world's leading provider of AI-powered solutions for social impact. Serving nonprofits, educational institutions, companies committed to corporate social responsibility, and individual change makers, Blackbaud propels impact at scale with the sector's most intelligent solutions for fundraising and engagement, education solutions, financial management and CSR and grantmaking. With the deepest expertise powered by the world's largest philanthropic data set, the most connected workflows, and the most powerful impact network, Blackbaud's solutions are building a future where resources are unleashed at the speed of need. Blackbaud has been recognized by Fast Company, Newsweek, Quartz, Forbes and more for AI innovation, responsible leadership and workplace excellence. Blackbaud has operations in the United States, Australia, Canada, Costa Rica, India and the United Kingdom, supporting users in 100+ countries. Learn more at www.blackbaud.com or follow Stockhouse Publishing Ltd. on X/Twitter, LinkedIn, Instagram and Facebook. Contact Information: Jennifer Sniderman Vice President, Corporate Communications [email protected]

Wesco promotes veteran sales leader to VP of Global Channel Sales. An 11-year Wesco/Anixter leader will direct Wesco's worldwide channel strategy for converging technologies, working with its largest global integrators across security, pro A/V, networking and related solutions. Electrical, communications and security supplies distributor Wesco International announced Aug. 11 that it has promoted Greg Lindblad to Vice President of Global Channel Sales for converging technologies within its Communications & Security organization. Lindblad previously served as Senior Director of Global Sales and Strategy for Security Solutions and brings more than 20 years of experience across technology manufacturing and distribution. In his new role, Lindblad will work with Wesco's largest global integrators to leverage the company's converging technologies portfolio, which spans security, professional audiovisual, networking, infrastructure, software and services. "Building on his success leading our global security integrator strategy, Lindblad will now lead our worldwide channel strategy, helping our largest global integrators leverage the full breadth of Wesco's converging technologies portfolio," said Tara Dunning, Wesco Vice President of Converging Technology, Global Strategy & Sales. Wesco introduced its converging technologies strategy in 2025 as an effort to better connect its portfolio, expertise and workforce around integrator needs while expanding connected solutions and market growth. The promotion follows another internal leadership move announced in June, when Pittsburgh-based Wesco promoted Jared Hoover to Vice President of Construction Solutions. Hoover previously served as Senior Director of Sales and has held leadership roles with Wesco Energy Solutions and the company's construction lighting business. Wesco - No. 1 on MDM's 2026 Top Electrical/Data/Security Distributors list - most recently reported record 2Q26 sales of $6.67 billion, up 13% year-over-year, while organic sales increased 12.6%. The company said backlog climbed about 60% to a record level, driven in part by data center awards. Communications and Security Solutions sales increased 18% to $2.68 billion during the quarter, including approximately 45% growth for Wesco Data Center Solutions. Wesco also raised its 2026 organic sales growth forecast to 9%-11% from 5%-8%. Recommended Reading

Wesco cloud CRM data breach: ExfilSquad data theft and supply chain risks analyzed. Executive summary. On August 11, 2026, Wesco, a global supply chain and distribution company, confirmed it is investigating a cybersecurity incident following claims by the data extortion group ExfilSquad of data theft and public leakage. The incident centers on Wesco's cloud CRM environment, with the company stating that no business disruption occurred and no evidence of ransomware or other malware was found on internal IT systems. Wesco does not believe sensitive customer or employee data, including payment card and financial account information, is at risk. However, ExfilSquad claims to have exfiltrated and leaked 2.6 million records containing customer and employee personally identifiable information (PII), account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access-related information. The attack method appears to be data theft and extortion, not ransomware encryption, and is consistent with ExfilSquad's historical tactics. The incident has significant third-party risk implications for organizations with data held by Wesco, increasing the likelihood of downstream phishing, business email compromise, and fraud. No technical indicators of compromise (IOCs) have been published as of the report date. Technical information. The Wesco incident is a confirmed case of data theft extortion, with the threat actor ExfilSquad claiming responsibility. The attack targeted Wesco's cloud CRM environment, which public reporting suggests may be based on Microsoft Dynamics 365 and potentially involved misconfigured Microsoft Power Pages data tables. The company's official statements and independent technical analyses agree that no ransomware or other malware was detected on internal IT systems, and business operations were not disrupted. ExfilSquad is known for extortion-only operations, focusing on the exfiltration and public leakage of sensitive data rather than deploying ransomware for encryption. The group's typical attack lifecycle includes initial access via compromised credentials (obtained through infostealer logs, password reuse, or phishing), exploitation of exposed remote access or cloud application misconfigurations, discovery and collection of high-value data, staging and compression of data using legitimate archiving tools (such as 7z.exe, rar.exe, winrar.exe, tar, and makecab), and exfiltration over HTTPS to attacker-controlled cloud storage using tools like rclone, MEGAsync, FileZilla, WinSCP, curl, or PowerShell. Data is often sent to services such as MEGA, pCloud, Backblaze B2, or anonymous VPS endpoints, with exfiltration typically scheduled during off-hours to avoid detection. The technical evidence from all primary sources indicates that the attack was limited to the cloud CRM environment, with no confirmed compromise of on-premises infrastructure or lateral movement within Wesco's broader IT estate. The absence of ransomware or destructive malware, combined with the extortion group's public claims and leak-site activity, aligns with ExfilSquad's established tactics, techniques, and procedures (TTPs). MITRE ATT&CK Mapping for this incident includes: - Initial Access: Valid Accounts (T1078), Exploit Public-Facing Application (T1190) - Discovery: Account Discovery (T1087), Cloud Service Discovery (T1526) - Collection: Data from Information Repositories (T1213), Archive Collected Data (T1560) - Exfiltration: Exfiltration Over Web Service (T1567.002), Exfiltration to Cloud Storage (T1537) - Impact: Data Leak (T1537), Extortion (T1657) No malware was detected, and all data staging and exfiltration activities leveraged legitimate administrative tools, making detection more challenging for traditional endpoint security solutions. ExfilSquad has a documented history of targeting large organizations in the supply chain, education, and public sector verticals, including previous breaches at Analog Devices, the UK's Police National Legal Database, and Newcastle University. The group's focus on cloud environments and misconfigured data tables is consistent with the observed attack on Wesco. The sector-specific risk is elevated due to the nature of Wesco's business, which involves holding sensitive data for thousands of downstream partners and customers. The stolen data set reportedly includes customer lists, shipment details, project pricing, and contact information, all of which can be weaponized for business email compromise, invoice fraud, and spear phishing campaigns targeting Wesco's ecosystem. Affected versions & Timeline. The incident is limited to Wesco's cloud CRM environment, which public sources suggest may involve Microsoft Dynamics 365 and Microsoft Power Pages data tables. No specific software version or CVE has been associated with the breach as of the publication date. Timeline of key events: - August 7, 2026: Researchers report ExfilSquad targeting additional victims and distributing stolen data via torrents. - August 11, 2026: Wesco confirms investigation into a cloud CRM security incident after becoming aware of a third-party claim of CRM data exfiltration. - August 11, 2026: ExfilSquad claims the breach and publishes the allegedly stolen data after ransom negotiation deadlines expire. No regulatory filings or law enforcement advisories have been referenced in public sources as of August 11, 2026. Threat activity. ExfilSquad is a data extortion group specializing in the theft and public leakage of sensitive data from large organizations. The group's operations are characterized by stealthy data collection and exfiltration, followed by extortion attempts and public data leaks if ransom demands are not met. In the Wesco incident, the group claims to have exfiltrated 2.6 million records, including customer and employee PII, account and contact data, CRM user profiles, credit and business identifiers, authentication metadata, and access-related information. The attack did not involve ransomware or destructive malware, and there was no reported business disruption. The group's tactics are consistent with previous campaigns, which have exploited misconfigured cloud environments and leveraged legitimate administrative tools for data staging and exfiltration. The incident poses significant third-party risk to organizations with data held by Wesco, as the stolen information can be used for downstream phishing, business email compromise, and fraud. The supply chain and distribution sector is particularly vulnerable to this type of attack due to the volume of sensitive partner and customer data held by companies like Wesco. Mitigation & workarounds. Mitigation efforts should prioritize the following actions, ordered by severity: Critical: Organizations with data held by Wesco should immediately assess their exposure and increase vigilance for targeted phishing, business email compromise, and fraud attempts leveraging stolen data. Security teams should review and update incident response plans to address third-party data breach scenarios. High: Review and harden cloud CRM configurations, especially for Microsoft Dynamics 365 and Microsoft Power Pages. Ensure that access controls, data table permissions, and authentication mechanisms are properly configured to prevent unauthorized access. High: Implement robust monitoring for anomalous access and data exfiltration activity in cloud environments. Leverage cloud-native security tools and logging to detect unusual data access patterns, large-scale exports, and off-hours activity. Medium: Conduct credential hygiene reviews, including forced password resets for users with access to sensitive cloud CRM data, and enable multi-factor authentication (MFA) wherever possible. Medium: Communicate with downstream partners and customers regarding the potential exposure of their data and provide guidance on recognizing and reporting phishing or fraud attempts. Low: Monitor public leak sites and threat intelligence feeds for evidence of your organization's data being exposed as part of the Wesco breach. Indicators of compromise. The following table contains indicators of compromise (IOCs) identified in public reporting as of August 11, 2026. These indicators are point-in-time and should be validated in your environment before enforcement. | Type | Indicator | Reported (date) | Source | | Domain | mallory[.]ai | 2026-08-11 | https://mallory.ai/stories/019ff1d1-40f3-7046-9d85-66ec4edfe32c | No additional technical IOCs (IP addresses, hashes, emails, etc.) were available in public sources at the time of writing. References. About rescana. Rescana provides a third-party risk management (TPRM) platform designed to help organizations identify, assess, and monitor risks arising from their vendor and partner ecosystem. Its platform enables continuous monitoring of third-party exposures, supports rapid incident response, and delivers actionable intelligence for supply chain and cloud security events. For questions about this report or to discuss your organization's third-party risk posture, contact Rescana at [email protected].