cyber-attack that seeks to damage an organization by targeting less-secure elements in the supply network