Exploit: Phishing, Vishing
Company: Cox Communications
Industry: Media, Digital Cable Provider
Source: https://www.forbes.com/sites/leemathews/2021/12/11/hacker-poses-as-support-rep-to-breach-cox-communications/

Digital cable provider Cox Communication recently disclosed a data breach after a successful vishing attack helped a threat actor gain access to customer information.

It has been reported that on Oct 11, 2021, the fraudster impersonated a Cox Communications support agent by phone and was able to gain customer information related to Cox accounts, such as;  names, addresses, telephone numbers, cox.net email addresses, username, PIN codes, security question and answers, and more.

Letters are now being sent to customers stating that the “unknown person(s)” impersonated a Cox support agent to access customer information. Cox says an internal investigation was immediately conducted to secure the affected accounts. "After further investigation, we discover that the unknown person(s) may have viewed certain types of information that are maintained in your Cox customer account, including your name, address, telephone number, Cox account number, Cox.net email address, username, PIN code, account security question and answer, and the types of services that you receive from Cox."

The company is now warning customers to look for further social engineering attacks and fraud activity in their Cox and other personal accounts.

Protect Your Business Against Modern Cyber Threats

More than ever, organizations of all sizes have been facing a historical rise in cyber attacks and data breaches. Talk to a cyber security expert today and find out how we can provide expert consulting and a portfolio of Cyber Security solutions designed to protect your organization against today’s most prevalent threats.