Operation First Light

Incoming — Commander Shepard

This one is different. The attacker never touched Coastal Data directly. They went through a vendor — a small IT monitoring tool called SiteWatch Pro that Coastal Data runs on every machine. Three months ago, the attacker compromised SiteWatch Pro's build server. This morning, the update pushed.

Carol Vance. CFO. Nineteen years at the company. Eight days from retirement. She did everything right.

It didn't matter.