Breaches are treated as discrete incidents, but exposure rarely ends when credentials are rotated. This Recon Village talk at DEF CON 34 examines the long tail of a software supply chain breach — how leaked credentials age, which secret classes survive longest, and how contextual residue (secret names, paths, service identifiers) becomes durable reconnaissance intelligence even after the original incident is closed.