According to Krebs On Security, an affiliate of an underground cybercrime forum advertised the sale earlier this week and also included the option of purchasing “information about security vulnerabilities in Verizon’s Web site.” That said, Verizon notes that only contact information was stolen from Verizon Enterprise customers, and that no Customer Proprietary Network Information (CPNI) or other data was compromised. Further, the company says, no consumer customers were affected by the hack.
When Krebs contacted Verizon about the alarming offer, the New Jersey-based firm noted that it was aware of a security flaw, and was contacting impacted customers.
“Verizon recently discovered and remediated a security vulnerability on our enterprise client portal,” the company said in an emailed statement. “Our investigation to date found an attacker obtained basic contact information on a number of our enterprise customers.”
Perhaps not the most comforting of statements, but at the very least, Verizon was up to date on its issues.
Curiously enough, Verizon (and Verizon Enterprise in particular) is the vendor of choice for most Fortune 500 companies, especially because of its supposedly robust cybersecurity practices. Each year, Verizon releases a report on how best to avoid cyberthreats, though this year it may need to take its own advice a bit more seriously.
Such an attack just goes to show that when it comes to digital crime, no one truly safe.
Editors' Recommendations
- The Uber hack is an outrageous tale of a teen hacking for fun
- Satellite connectivity on iPhone 14 is great, but its future is far more exciting
- Google slapped with record-setting antitrust fine in the EU
- Your Steam account could be in danger because of this new phishing technique
- My 5 favorite iOS 16 features (and 1 I hate) after using it for two months
