Supplier incident triage: evidence and leadership brief

A practical three-page guide for turning a supplier disclosure into a scoped internal review and a recorded decision.

Use the guide to

1. Confirm the population and unresolved scope with the supplier through a known contact.
2. Brief people who handle identity resets and retain evidence of the briefing.
3. Review relevant authentication signals for the scoped users and period.
4. Record the evidence, remaining unknowns, owner, next review and current decision.

The example is illustrative MicroApz guidance, not a customer result. Adapt it to your incident process and verify facts against the original supplier notice.

Download the supplier incident triage guide (PDF)

Source context: Chainalysis, Security Incident Information, 30 October 2026. The guide was reviewed on 2 November 2026 and does not claim that a follow-on attack occurred.