Forest Global Training Partners

Cyber Risks · Krebs on Security

FCC Fines Cox $595K Over Lizard Squad Hack

Summary: The FCC fined Cox Communications $595,000 after a Lizard Squad member calling himself "Evil Jordie" phoned Cox support posing as the company's IT department and tricked a customer service representative and a contractor into entering their credentials on a phishing site. The FCC said the hacker then accessed names, addresses, email addresses, secret questions and answers, PINs, and in some cases partial Social Security and driver's license numbers of 61 cable customers, posted some of the data on social media, changed some account passwords, and shared the credentials with another alleged Lizard Squad member.

Key Takeaway: The breach turned on two employees typing their credentials into a fake login page, which the author notes two-step authentication for employees would likely have stopped - and the settlement commits Cox to annual system audits, internal threat monitoring, penetration testing, and seven years of FCC monitoring.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related