Text Message Giant Reveals Five-Year Breach

A important telecoms company service provider has disclosed it was the victim of a 5-12 months breach impacting hundreds of shoppers.

Syniverse routes text messages for hundreds of global telco buyers — letting it to boast of reaching “more folks and equipment than everyone on Earth.”

Even so, in a filing with the SEC last week in advance of the business going general public by way of a merger with a distinctive intent acquisition business (SPAC), it admitted finding a main incident back again in Might.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The unauthorized obtain to its operational and IT programs was subsequently observed to have been ongoing due to the fact Could 2016.

“Syniverse’s investigation exposed that the unique or corporation obtained unauthorized access to databases inside its network on numerous occasions, and that login info letting accessibility to or from its Digital Data Transfer (EDT) natural environment was compromised for approximately 235 of its shoppers,” it continued.

“All EDT consumers have been notified and have had their credentials reset or inactivated, even if their credentials were not impacted by the incident. All prospects whose credentials have been impacted have been notified of that circumstance.”

Despite the fact that the company claimed it has viewed no efforts to disrupt operations or monetize the attack, it could not rule out further discoveries.

“While Syniverse believes it has recognized and sufficiently remediated the vulnerabilities that led to the incidents described earlier mentioned, there can be no promise that Syniverse will not uncover proof of exfiltration or misuse of its data or IT units from the May perhaps 2021 Incident, or that it will not experience a potential cyber-attack foremost to this kind of effects,” it stated.

“Any these types of exfiltration could direct to the public disclosure or misappropriation of shopper knowledge, Syniverse’s trade insider secrets or other mental assets, private info of its staff, delicate details of its customers, suppliers and suppliers, or materials monetary and other information and facts related to its small business.”

It is really unclear specifically what info the attackers would have acquired entry to with the EDT compromise, but it could theoretically include things like metadata or even the content material of textual content messages, including a single-time passcodes, which could unlock two-factor authentication-guarded accounts.

The business promises to process about 740 billion messages just about every calendar year for 300+ world wide cellular operators.

An audacious provide chain raid like this bears the hallmarks of country-state intelligence collecting or a remarkably arranged cybercrime group.