Sprint Exposed Customer Support Site to Web
Summary: Sprint confirmed that its internal "Social Care" customer support forum, intended to be private, was indexed by search engines and viewable without authentication, exposing several months of posts. A review of the forum found no payment card data but did find customer names, device identifiers, some location information, and numerous links and references to internal tools and procedures.
Key Takeaway: The exposed references to internal tools and procedures are the kind of material scammers use for social engineering against carrier employees, the same approach Vice reported being used to phish staff at major U.S. telecom companies and to get them to install software that enables SIM swaps.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026