Breach at Cisco Duo authentication provider leaks SMS authentication logs
Cisco Duo's North American telephony and SMS authentication provider was breached through an employee account compromised by phishing. The attacker downloaded authentication message logs containing some customers' phone numbers, carriers, locations and times. The provider said message contents were not accessed, and Cisco Duo disclosed the leak.
Key facts
- Affected organisation
- Cisco
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Authentication message logs of some customers, including phone numbers, carriers, locations and times
- Cause / method
- Breach via a provider employee account compromised by phishing
- Location
- United States
If your data was exposed
Exposed dataPhone number
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- Cisco Duo disclosed that a breach at its North American telephony and SMS authentication provider had leaked some customers' authentication message logs.
2 related reports
Other incidents at Cisco
Cisco Salesforce CRM breach puts 3 million customer records at risk
3mImpact: 3 million customer records at risk of exposure
A breach occurred in Cisco's Salesforce customer relationship management system. The incident put 3 million customer records at risk, and whether data was actually leaked and the response have not been confirmed.
Related reports: 3 · last report →Cisco hit by voice phishing, website user data stolen
Impact: Profile information of users registered on Cisco.com
Cisco was hit by a voice phishing attack, and user information was stolen from its customer relationship management system. The leaked data included profile information of users registered on Cisco.com. Cisco disclosed the data breach affecting user accounts.
Related reports: 5 · last report →Cisco cloud data stolen and published online
Impact: 2.9GB of data published online; attackers claim 4.5TB stolen in total
Allegations of a Cisco data breach surfaced in October 2024, and in December IntelBroker published online 2.9GB of Cisco-related data stolen from a cloud instance. The attackers claimed the total amount stolen was 4.5TB. Cisco said the additional leak in December and material published by a ransomware gang in February 2025 were linked to the earlier hack.
Related reports: 9 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.