Top ad tech firm Optimizely hit by data breach - around 10,000 companies possibly affected

• Optimizely suffered breach via sophisticated voice-phishing attack on Feb 11
• Hackers accessed CRM records and internal documents, leaking “basic” customer contact info
• No sensitive data confirmed stolen; incident resembles ShinyHunters’ recent vishing campaigns

Optimizely has confirmed suffered a cyberattack in which it lost “basic” contact information on some of its customers.

Optimizely is a digital experience platform which helps businesses manage their websites and marketing campaigns to improve conversions and customer engagement, and is well known for A/B testing and experimentation, enterprise CMS systems, and various digital ecommerce tools, serving more than 10,000 businesses, includign the likes of H&M, PayPal, Toyota, Nike, and Salesforce.

The company recently sent out data breach notification letters to some of its affected customers, saying the breach took place on February 11, and that the attackers gained access “through a sophisticated voice-phishing attack” but were not able to escalate privileges or deploy malware ...