Brevo (formerly Sendinblue) disclosed a security incident where six customer accounts were compromised, leading to a supply chain attack affecting over 100,000 websites. The attackers injected WordPress backdoors and Clickfix malware into these sites. This incident highlights the significant risks associated with third-party service compromises and their potential cascading effects on client infrastructure.