Digital cable provider Cox Communication recently disclosed a data breach after a successful vishing attack helped a threat actor gain access to customer information.
It has been reported that on Oct 11, 2021, the fraudster impersonated a Cox Communications support agent by phone and was able to gain customer information related to Cox accounts, such as; names, addresses, telephone numbers, cox.net email addresses, username, PIN codes, security question and answers, and more.
Letters are now being sent to customers stating that the “unknown person(s)” impersonated a Cox support agent to access customer information. Cox says an internal investigation was immediately conducted to secure the affected accounts. "After further investigation, we discover that the unknown person(s) may have viewed certain types of information that are maintained in your Cox customer account, including your name, address, telephone number, Cox account number, Cox.net email address, username, PIN code, account security question and answer, and the types of services that you receive from Cox."
The company is now warning customers to look for further social engineering attacks and fraud activity in their Cox and other personal accounts.