A vishing (voice phishing) attack on an unnamed third-party vendor supporting Ericsson's US operations exposed personal and financial data of 15,661 individuals. Attackers socially engineered a vendor employee over the phone in April 2025, gaining access to records between April 17–22. Ericsson wasn't notified until November
•3m read time• From go.theregister.com
Sort: