Is Your Voicemail Wide Open?
Summary: Krebs on Security reports that the U.K. phone-hacking scandal involved alleged intrusions into the voicemail boxes of celebrities and 9/11 victims, and that many wireless providers rely on caller ID to verify voicemail access rather than requiring a PIN. Using the caller ID spoofing service Spooftel, Krebs called his wife's AT&T iPhone, pressed the # sign, and reached her saved messages without a password; The Boston Globe reported Sprint and T-Mobile also did not require a PIN, while Verizon did.
Why it matters: The FBI is investigating whether News Corp. employees hacked the voicemail boxes of 9/11 victims, and the access method required nothing more than a spoofed caller ID and a phone that had never set a voicemail PIN.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026