A vendor-linked account is an external or third-party login that is allowed to connect into a company environment. It is commonly used by suppliers, contractors, or managed service providers for support, maintenance, software updates, or logistics. These accounts matter because they often bridge the boundary between organizations, so they can carry trusted access into internal systems, cloud consoles, or operational tools.
In cyber attacks, vendor-linked accounts are attractive targets because compromising one can give an attacker a legitimate path into the victim network. Weak controls, such as shared credentials, missing MFA, excessive permissions, or stale access that was never removed, can turn a vendor login into a persistence point or a way to move laterally. Defenders should inventory these accounts, apply least privilege, require strong authentication, log activity, and review access regularly so third-party access stays necessary and visible.