Telecom · US · 3 min read
Spectrum: one phone call, up to 13 million customer records
13M
customer records at risk
Attackers called staff, talked their way into a work account and reached millions of customer records.
How they got in
Voice phishing (vishing) against an employee's work account.
The damage
4.9M–13M customer records.
Board takeaway
Your help desk is your front door. Never reset access based on a phone call alone.
What to do this week
- Make staff hang up and call back on a known number.
- Require a manager's approval for access resets.
- Alert when a sign-in method is changed.
Next breakdown
Supermarket freezers hacked: tens of millions of euros of food thrown away →