Breaches and incidents

Optimizely: vishing gives attackers CRM and back-office documents

Optimizely notified customers that attackers took basic business contact information from certain internal business systems, CRM records and a limited set...

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Optimizely notified customers that attackers took basic business contact information from certain internal business systems, CRM records and a limited set of back-office documents; it says the intruder “was unable to escalate privileges, install software, or create any backdoors.” Count not disclosed (about 10,000 business customers total).
  • Root cause: voice phishing of staff.
  • Optimizely describes a “loosely affiliated group”; BleepingComputer suggests ShinyHunters.
  • Customers notified.