Up to 14 million Verizon subscribers may have had their sensitive data exposed by Nice Systems, a partner of Verizon, reports ZDNet. Subscriber records from users who called customer service over the past six months were located on an unprotected Amazon S3 storage server controlled by Verizon partner Nice Systems.
The data, which included customer names, phone numbers, home addresses, email addresses, and account PINs, was accessible to anyone who found what ZDNet says was an easy-to-guess web address. That PINs were made available is concerning as a PIN is what's used to verify a customer's identify and make changes to an account.
Verizon was informed of the leak in late June and it took more than a week for the information to be secured. Verizon told ZDNet it is investigating how information was improperly stored on the Amazon Web Services server. The company also said the "overwhelming majority" of the data has "no external value" and there's "no indication that the information has been compromised."
The data, which included customer names, phone numbers, home addresses, email addresses, and account PINs, was accessible to anyone who found what ZDNet says was an easy-to-guess web address. That PINs were made available is concerning as a PIN is what's used to verify a customer's identify and make changes to an account.
The customer records were contained in log files that were generated when Verizon customers in the last six months called customer service. These interactions are recorded, obtained, and analyzed by Nice, which says it can "realize intent, and extract and leverage insights to deliver impact in real time." Verizon uses that data to verify account holders and to improve customer service.There were six folders for the months between January 2017 and June 2017, which included customer calls from several different US regions. Records included "hundreds of fields of additional data" beyond name, phone number, and PIN, like current account balance, a list of Verizon services, and more. No audio files were found, though the log files were based on calls. Some of the data was masked, but it's not clear what was hidden and what was exposed.
Verizon was informed of the leak in late June and it took more than a week for the information to be secured. Verizon told ZDNet it is investigating how information was improperly stored on the Amazon Web Services server. The company also said the "overwhelming majority" of the data has "no external value" and there's "no indication that the information has been compromised."
"Verizon provided the vendor with certain data to perform this work and authorized the vendor to set up AWS storage as part of this project," said a spokesperson. "Unfortunately, the vendor's employee incorrectly set their AWS storage to allow external access."Verizon customers who have called in to customer support over the course of the last six months should update their PINs as a precaution.
Update: Verizon released a press statement clarifying that no one accessed the data, so there was no theft or loss of customer information. Verizon also says that only 6 million unique customers were affected and those customers were part of its residential and small business wireline.
Tag: Verizon
35 comments
Back in 2017, NVIDIA announced the launch of its GeForce Now streaming gaming service, which it made available in a beta capacity.
After years of testing, polishing, and refining, the GeForce...
Since launch, Apple's Mac Pro has been the butt of jokes because of some of its expensive add-ons, such as the option to purchase wheels for an additional $400.
As pointed out by...
A vulnerability in WiFi chips made by Cypress Semiconductor and Broadcom left billions of devices susceptible to an attack that allowed nearby attackers to decrypt sensitive data sent over the air.
...
Code in the iOS 13.4 beta released this morning suggests that Apple is developing an over-the-air recovery feature designed for the iPhone and the iPad.
There are references to a hidden...
Apple's annual shareholders meeting took place this morning at the Steve Jobs Theater on the Apple Park campus, and while most of the focus was on shareholder proposals, Apple executives in...
Apple today seeded the third betas of upcoming iOS and iPadOS 13.4 updates to developers, one week after the release of the second betas and a month after the release of iOS and iPadOS 13.3.1.
...
Eero's lineup of routers now support HomeKit, eight months after Apple announced Amazon-owned Eero as one of the companies adding HomeKit support back in June at WWDC.
Any Eero, Eero Pro, or...
Cable company Altice USA today announced that it has launched its Altice One experience on Apple TV, offering access to the company's streaming live TV service, on-demand video, and cloud DVR...
