Verizon Enterprise Solutions, a B2B unit of the telecommunications giant suffered a data breach incident after a third party offered a database containing the contact information on some 1.5 million customers for sale.
The attackers offered the entire package at $100,000, and also the information about security vulnerabilities in Verizon’s Web site that permitted them to steal customer contact information, .
Verizon identified and remediated the security vulnerability and also informed the affected individuals.
Source: https://krebsonsecurity.com/2016/03/crooks-steal-sell-verizon-enterprise-customer-data/
TPRM report: https://scoringcyber.rankiteo.com/company/verizonbusiness
"id": "ver232118522",
"linkid": "verizonbusiness",
"type": "Breach",
"date": "03/2016",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 1500000,
'industry': 'Telecommunications',
'name': 'Verizon Enterprise Solutions',
'type': 'B2B Unit'}],
'attack_vector': 'Exploitation of Web Vulnerabilities',
'data_breach': {'data_exfiltration': True,
'number_of_records_exposed': 1500000,
'type_of_data_compromised': 'Contact Information'},
'description': 'Verizon Enterprise Solutions, a B2B unit of the '
'telecommunications giant suffered a data breach incident '
'after a third party offered a database containing the contact '
'information on some 1.5 million customers for sale.',
'impact': {'data_compromised': 'Customer Contact Information'},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Financial Gain',
'post_incident_analysis': {'corrective_actions': 'Identified and remediated '
'the security vulnerability',
'root_causes': 'Security Vulnerabilities in '
'Verizon’s Web site'},
'response': {'communication_strategy': 'Informed the affected individuals',
'remediation_measures': 'Identified and remediated the security '
'vulnerability'},
'title': 'Verizon Enterprise Solutions Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Security Vulnerabilities in Verizon’s Web site'}