Hacker used a voice phishing assault to steal Cisco prospects’ private data

A cybercriminal tricked a Cisco consultant into granting them entry to steal the non-public data of Cisco.com customers, the corporate stated on Tuesday.

Cisco stated it found the breach on July 24, blaming the incident on a voice phishing or “vishing” name. The hackers accessed and exported “a subset of primary profile data” from the database of a 3rd social gathering cloud-based buyer relationship administration (CRM) system, in line with the corporate’s disclosure. 

Cisco stated that the stolen knowledge included the client’s “identify, group identify, deal with, Cisco assigned person ID, electronic mail deal with, telephone quantity, and account-related metadata,” such because the account creation date. 

The networking tech big didn’t specify what number of Cisco.com customers had been affected by the breach. When reached by electronic mail, Cisco spokesperson Carro Halpin wouldn’t say.

As Bleeping Laptop famous, this breach may very well be one other one in a string of assaults that focused firms’ Salesforce knowledge, together with U.S. insurance coverage big Allianz Life, luxurious retailer Tiffany and Co., Australian airline Qantas, and others. 

Cisco is a recognized buyer of Salesforce, in line with the cloud big.

This story was up to date to incorporate a response from Cisco.