Smart Link BPO Solutions

Smart Link BPO Solutions, also known as Smart Link, is an IT outsourcing provider headquartered in Saudi Arabia. The company delivers business process outsourcing services focused on information technology functions for Saudi Arabian enterprises and government agencies. Its service portfolio includes customer relationship management administration, email and Office 365 support, Active Directory management, and maintenance of internal business applications. These capabilities position the firm as a technology support partner for clients that rely on Microsoft‑centric infrastructures.

The organisation’s client base spans multiple sectors, as evidenced by the 2022 breach that exposed records linked to the airline FlyNas and the charitable organization SAMACares. The incident involved the exfiltration of over 100,000 records, comprising CRM data, personal information, email correspondence, contracts, and account credentials. Smart Link maintains a corporate website that was defaced during the attack, indicating a public‑facing digital presence. The breach also revealed that attackers gained entry through a compromised employee account and moved laterally within the network using tools such as the Metasploit Framework.

Beyond the immediate impact, the attack highlighted Smart Link’s role in handling sensitive government and enterprise data, which amplifies supply‑chain risk for interconnected organisations. Prior to the 2022 event, credentials associated with the firm had already appeared in dark‑web markets, suggesting earlier exposure. The threat actors used a Telegram channel to disseminate the stolen material, signalling ideological motives rather than financial gain. These details underscore the company’s specialization in managing critical IT environments and the associated security challenges inherent to such a position.