Data from six millions accounts leaked, but Verizon says it's OK

World
Europe

A cyber security team on Wednesday said 14 millions Verizon accounts were leaked online, warning that the information could be used by scammers to steal money from the users of the US telecommunications company.

But Verizon does not seem as alarmed.

On the same day, the company said that fraudsters cannot access the leaked information, noting that the number of leaked accounts stands at six millions.

A mistake committed by one of Verizon's partners, data company NICE Systems, allowed the system to be compromised. NICE stored the accounts on a cloud server without encryption.

Leaked data include personal information like name, address, phone number, and most importantly, PIN code, which can be used to identify the owner of a phone number.

Details related to the leak were reported online by a California-based cyber resilience startup called UpGuard.

UpGuard drew attention about the Verizon leak. /UpGuard Screenshot

According to UpGuard's report, the leak affects 14 millions of Verizon customers in the US who called the company's support hotline in the previous six months.

If swindlers get their hands on a customer's phone number's PIN code, they can pretend to be that person and ask Verizon to issue a new SIM card. They can then receive all SMS verification codes, which will enable them to access whichever platform the person is already signed on with their phone numbers.

Confirmation and denial

Verizon published an announcement on its official website later in the day confirming the news about the leak, but claiming at the same time that the only outsider who got the data was "a researcher who brought this issue to Verizon's attention."

"In other words, there has been no loss or theft of Verizon or Verizon customer information," Verizon added in the announcement.

The full text of Verizon's official response to the news about the leak on July 12, 2017. /Verizon Screenshot

If Verizon is to be believed and the company's reassurances are not just an attempt to escape a PR crisis, then everyone can put their feet up and get on with their life (and online purchases).

Change your PIN right now

But what if there were other people who managed to download the personal information data?

If hackers got your PIN, they can hijack your SMS verification code. /VCG Photo

It's not all doom and gloom. There are things one can do if the fear of having their PIN code stolen reached crippling levels.

The support page of Verizon's website says one can change the PIN code easily, by filling a form on this link: vzw.com/PIN.

But when CGTN Digital visited the public link on Friday evening, a notice saying "Page is unavailable" welcomed us.

Still, users can log into their Verizon account, and follow instructions on how to change their PIN online.