Up to 14 million Verizon subscribers may have had their sensitive data exposed by Nice Systems, a partner of Verizon, reports ZDNet. Subscriber records from users who called customer service over the past six months were located on an unprotected Amazon S3 storage server controlled by Verizon partner Nice Systems.
The data, which included customer names, phone numbers, home addresses, email addresses, and account PIN numbers, was accessible to anyone who found what ZDNet says was an easy-to-guess web address. That PIN numbers were made available is concerning as a PIN number is what`s used to verify a customer`s identify and make changes to an account.
The customer records were contained in log files that were generated when Verizon customers in the last six months called customer service. These interactions are recorded, obtained, and analyzed by Nice, which says it can `realize intent, and extract and leverage insights to deliver impact in real time.` Verizon uses that data to verify account holders and to improve customer service.There were six folders for the months between January 2017 and June 2017, which included customer calls from several different US regions. Records included `hundreds of fields of additional data` beyond name, phone number, and PIN, like current account balance, a list of Verizon services, and more. No audio files were found, though the log files were based on calls. Some of the data was masked, but it`s not clear what was hidden and what was exposed.
Verizon was informed of the leak in late June and it took more than a week for the information to be secured. Verizon told ZDNet it is investigating how information was improperly stored on the Amazon Web Services server. The company also said the `overwhelming majority` of the data has `no external value` and there`s `no indication that the information has been compromised.``Verizon provided the vendor with certain data to perform this work and authorized the vendor ...
|
