According to Krebs On Security, an affiliate of an underground cybercrime forum advertised the sale earlier this week and also included the option of purchasing “information about security vulnerabilities in Verizon’s Web site.” That said, Verizon notes that only contact information was stolen from Verizon Enterprise customers, and that no Customer Proprietary Network Information (CPNI) or other data was compromised. Further, the company says, no consumer customers were affected by the hack.
When Krebs contacted Verizon about the alarming offer, the New Jersey-based firm noted that it was aware of a security flaw, and was contacting impacted customers.
“Verizon recently discovered and remediated a security vulnerability on our enterprise client portal,” the company said in an emailed statement. “Our investigation to date found an attacker obtained basic contact information on a number of our enterprise customers.”
Perhaps not the most comforting of statements, but at the very least, Verizon was up to date on its issues.
Curiously enough, Verizon (and Verizon Enterprise in particular) is the vendor of choice for most Fortune 500 companies, especially because of its supposedly robust cybersecurity practices. Each year, Verizon releases a report on how best to avoid cyberthreats, though this year it may need to take its own advice a bit more seriously.
Such an attack just goes to show that when it comes to digital crime, no one truly safe.
Editors' Recommendations
- Verizon 5G rollout: Here is everything you need to know
- Verizon video game streaming service leaked, currently testing on Nvidia Shield
- BlackBerry sets own pace for 2019: Strikes Verizon deal, but no 5G phone coming
- Building sites, mountains, and water, the Cat S48c can handle it all
- HMD’s Nokia phones arrive on Verizon and Cricket, without Google’s Android One
