Hackers use "voice phishing" attack to steal Cisco customer personal info

• A scammer tricked a Cisco employee into granting access to a CRM
• The attacker then used the access to exfiltrate sensitive data
• Affected customers were notified "where required by law"

Cisco has admitted recently suffering a cyberattack which saw it lose a whole lot of customer data, including personally identifiable information (PII).

In a short announcement published on its website, the company revealed a threat actor used voice phishing (vishing) to trick a Cisco representative and gain access to an instance of a third-party cloud-based Customer Relationship Management (CRM) system it uses.

Following the intrusion, Cisco launched an investigation, which determined sensitive customer data was extracted.

Passwords are safe

“Our investigation has determined that the exported data primarily consisted ...