The Bombardier announcement seems to reference the Accellion hack, a sprawling incident affecting firms in the U.S. and Canada.

Kroger is only the latest firm to be swept up in a breach that began at Accellion, a software provider.