We Take Your Privacy and Security. Seriously.
Summary: A Cox Communications customer service representative was socially engineered into giving her account credentials to a caller posing as a Cox tech support staffer, and the attacker then viewed personal information on 52 customers, including names, addresses, email addresses, Secret Question/Answer, PIN, and in some cases the last four digits of Social Security or driver's license numbers. Cox public affairs director Stephen Boggs confirmed the employee login portal was reachable on the public internet and protected by username and password only, with no two-factor authentication in this case.
What's compelling: Fifty-two customers had data exposed because a single support rep could reach their records from a public login page with nothing more than a password, and Cox's own response was to promise re-training and to close the gap after the fact.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026