What do you call that thing when your vendor gets hacked?

Vendor breaches don't get CVEs. But when events like Salesloft happen, you care about whether your data was exposed as a result of the breach.