Crooks Steal, Sell Verizon Enterprise Customer Data
Summary: A member of an underground cybercrime forum advertised the sale of a database containing contact information on some 1.5 million Verizon Enterprise customers, priced at $100,000 for the full package or $10,000 per 100,000 records, with an option to buy details on security vulnerabilities in Verizon's website. Verizon Enterprise said it discovered and remediated a vulnerability on its enterprise client portal through which an attacker obtained basic contact information on a number of enterprise customers, and that no customer proprietary network information or other data was accessed or accessible.
What you should know: Verizon Enterprise is the unit Fortune 500 companies call in to respond to major breaches, and roughly 99 percent of Fortune 500 companies use it, so a target-rich contact list of technical managers at those customers is a ready-made base for phishing and other targeted attacks.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026