Data on an undisclosed number of customers grabbed in attack
A scammer tricked a Cisco employee into granting access to a CRM
The attacker then used the access to exfiltrate sensitive data
Affected customers were notified «where required by law»
Cisco has admitted recently suffering a cyberattack which saw it lose a whole lot of customer data, including personally identifiable information (PII).
In a short announcement published on its website, the company revealed a threat actor used voice phishing (vishing) to trick a Cisco representative and gain access to an instance of a third-party cloud-based Customer Relationship Management (CRM) system it uses.
Following the intrusion, Cisco launched an investigation, which determined sensitive customer data was extracted.
