Vodafone

Vodafone realised they suffered a data breach after that cybercriminals have broken into a sales partner and copied sensitive data.

There has been a cyber issue at Vodafone's partner Vertriebswerk in which critical data leaked; this is not a phishing email; many Vodafone customers are currently receiving emails requesting them to set a new password.

Name, birthday, email address, mobile phone number, address, bank information (IBAN/BIC), and customer password are all impacted, according to Vodafone in the email that is available online.

Vodafone promptly reported the occurrence to the Federal Commissioner for Data Protection and Freedom of Information.

Source: https://www.heise.de/news/Datenleck-Sensible-Daten-bei-Einbruch-bei-Vodafone-Vetriebspartner-kopiert-9181334.html

TPRM report: https://scoringcyber.rankiteo.com/company/vodafone

"id": "vod93129723",
"linkid": "vodafone",
"type": "Breach",
"date": "06/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Telecommunications',
                        'name': 'Vodafone',
                        'type': 'Telecommunications Company'}],
 'attack_vector': 'Data Breach',
 'customer_advisories': 'Emails requesting password resets',
 'data_breach': {'data_exfiltration': True,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Bank Information']},
 'description': 'Vodafone experienced a data breach after cybercriminals '
                'infiltrated a sales partner, Vertriebswerk, and copied '
                'sensitive data. The breach involved the leakage of critical '
                'customer information, prompting Vodafone to notify affected '
                'customers and request password resets.',
 'impact': {'data_compromised': ['Name',
                                 'Birthday',
                                 'Email Address',
                                 'Mobile Phone Number',
                                 'Address',
                                 'Bank Information (IBAN/BIC)',
                                 'Customer Password']},
 'initial_access_broker': {'entry_point': 'Sales Partner (Vertriebswerk)'},
 'motivation': 'Unauthorized Access to Sensitive Data',
 'references': [{'source': 'Online Email Notification'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
                                                       'Federal Commissioner '
                                                       'for Data Protection '
                                                       'and Freedom of '
                                                       'Information'},
 'response': {'communication_strategy': 'Notified customers via email to reset '
                                        'their passwords'},
 'threat_actor': 'Cybercriminals',
 'title': 'Vodafone Data Breach via Vertriebswerk',
 'type': 'Data Breach'}