A recent breach of Klue, a software-as-a-service provider, has revealed that even threat actors' infrastructures can be vulnerable to cyber attacks. The initial compromise was followed by a second criminal group claiming to have breached the first extortion crew, stealing already stolen data. This incident highlights weaknesses in SaaS integrations and identity management, demonstrating that threat actors' operations are not as secure as previously thought1. The Klue breach shows that cyber risk is no longer limited to direct attacks, but also extends to third-party vendors and suppliers. This new reality of third-party cyber risk poses significant challenges for defenders, who must now consider the potential vulnerabilities of their suppliers and partners. The breach of a threat actor's infrastructure is a rare occurrence, but it underscores the importance of robust security measures and due diligence in managing third-party risk, making it essential for practitioners to reevaluate their security strategies.