supply chain cyberattack