U.S. Telecoms Targeted, Consumers Hit Hardest

Multiple U.S. telecommunications companies were subject to large-scale data leaks in Jan–Feb 2023—driven primarily by third-party vendor breaches, misconfigured cloud storage, and API exploitation—resulting in tens of millions of customers’ PII being exposed or sold by actors such as IntelBroker and CL0P, enabling downstream fraud (including SIM swaps); the report emphasizes the systemic supply-chain risk and recommends stronger third-party risk management, SBOMs, VAPT, cyber insurance, and zero‑trust defenses.