Up to 14 million Verizon subscribers may have had their sensitive data exposed by Nice Systems, a partner of Verizon, reports ZDNet. Subscriber records from users who called customer service over the past six months were located on an unprotected Amazon S3 storage server controlled by Verizon partner Nice Systems.
The data, which included customer names, phone numbers, home addresses, email addresses, and account PINs, was accessible to anyone who found what ZDNet says was an easy-to-guess web address. That PINs were made available is concerning as a PIN is what's used to verify a customer's identify and make changes to an account.
Verizon was informed of the leak in late June and it took more than a week for the information to be secured. Verizon told ZDNet it is investigating how information was improperly stored on the Amazon Web Services server. The company also said the "overwhelming majority" of the data has "no external value" and there's "no indication that the information has been compromised."
The data, which included customer names, phone numbers, home addresses, email addresses, and account PINs, was accessible to anyone who found what ZDNet says was an easy-to-guess web address. That PINs were made available is concerning as a PIN is what's used to verify a customer's identify and make changes to an account.
The customer records were contained in log files that were generated when Verizon customers in the last six months called customer service. These interactions are recorded, obtained, and analyzed by Nice, which says it can "realize intent, and extract and leverage insights to deliver impact in real time." Verizon uses that data to verify account holders and to improve customer service.There were six folders for the months between January 2017 and June 2017, which included customer calls from several different US regions. Records included "hundreds of fields of additional data" beyond name, phone number, and PIN, like current account balance, a list of Verizon services, and more. No audio files were found, though the log files were based on calls. Some of the data was masked, but it's not clear what was hidden and what was exposed.
Verizon was informed of the leak in late June and it took more than a week for the information to be secured. Verizon told ZDNet it is investigating how information was improperly stored on the Amazon Web Services server. The company also said the "overwhelming majority" of the data has "no external value" and there's "no indication that the information has been compromised."
"Verizon provided the vendor with certain data to perform this work and authorized the vendor to set up AWS storage as part of this project," said a spokesperson. "Unfortunately, the vendor's employee incorrectly set their AWS storage to allow external access."Verizon customers who have called in to customer support over the course of the last six months should update their PINs as a precaution.
Update: Verizon released a press statement clarifying that no one accessed the data, so there was no theft or loss of customer information. Verizon also says that only 6 million unique customers were affected and those customers were part of its residential and small business wireline.
Tag: Verizon
35 comments
Samsung recently released its latest flagship smartphones, the Galaxy Note 10 and the Galaxy Note 10+, which will be two of Apple's main competitors for the upcoming 2019 iPhones.
The new...
Apple added new features and new functionality to most of its built-in apps, including Health and Activity, both of which have either changed significantly or have major new features worth noting.
...
Dutch brand ZENS today unveiled a wireless charging mat with 16 overlapping coils, allowing two devices to be charged anywhere on the mat.
The ZENS Liberty will be able to charge any...
Update: On schedule, the HomePod has now launched in Japan and Taiwan.
Original story follows.
Apple's HomePod is set to launch in Japan and Taiwan next week, on Friday, August 23,...
Ahead of the launch of iOS 13, iPadOS, and macOS Catalina, Apple has updated its iCloud.com beta site with a fresh look and a new Reminders app (via Federico Vittici).
The beta version of...
Bose today announced the launch of a new speaker, the Bose Portable Home Speaker, which is designed to work with Apple's AirPlay 2 protocol.
The Bluetooth-enabled Portable Home Speaker is...
A report yesterday from The Chicago Tribune suggested Apple's iPhones were emitting radiofrequency radiation beyond federal safety limits following independent lab testing, and now, a law firm is...
Google today announced its next major version of Android will be named Android 10, as the company has decided to move past dessert-inspired names for the operating system like Ice Cream Sandwich,...
