Archive — US — techcrunch
Hacker used a voice phishing attack to steal Cisco customers’ personalinformation
A hacker used a voice phishing attack to deceive a Cisco employee into accessing personal information of users on Cisco.com. Discovered on July 24, the breach compromised a subset of profile data stored in a third-party CRM system, though the exact number of affected users remains unspecified.
Key points
- The incident involved a voice phishing call that tricked a Cisco representative.
- Personal information stolen included names, organization names, addresses, user IDs, email addresses, phone numbers, and account-related metadata.
- Cisco identified the breach on July 24 and attributed it to a third-party CRM system.
- Similar data breaches have targeted other companies using Salesforce solutions, indicating a wider trend in cyberattacks.
Why it matters
- The breach reflects increasing vulnerabilities in cloud-based CRM platforms like Salesforce, emphasizing the need for improved security measures.
- Historical context includes prior data breaches at major companies like Allianz Life and Qantas, showcasing ongoing threats in the cybersecurity landscape.
- The rise of voice phishing attacks indicates a shift in the tactics used by cybercriminals, aligning with current IT trends focused on enhancing cyber defenses by 2025.
The breach at Cisco highlights the growing trend of sophisticated phishing attacks and the critical need for enhanced cybersecurity measures, especially for companies relying on third-party systems.