Verizon to pay $16 million in TracFone data breach settlement
ID: 3c0812aa-de09-5617-afec-36895e3fd177
STIX ID: report--3c0812aa-de09-5617-afec-36895e3fd177
Feed Name: Bleeping Computer
Threat Score
Verizon's TracFone experienced three separate data breaches from 2021–2023 in which attackers exploited API and web-order vulnerabilities to access customer PII and CPNI and to perform unauthorized number porting/SIM changes; the FCC-approved consent decree imposes a $16M civil penalty and requires TracFone to implement specified security controls, SIM/port protections, periodic assessments, and training by February 28, 2025.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.