Voice phishing is becoming a cloud security problem, not just a help desk problem.

Charter Communications confirmed a cybersecurity incident after the ShinyHunters extortion group claimed it had stolen customer data and threatened to leak it unless a ransom was paid. The company, which operates under the Spectrum brand, said it is investigating the incident and coordinating with authorities.

“The Charter breach is a reminder that the most sophisticated security stack in the world can be undone by a convincing phone call,” Andrew Chipman, GRC manager at ProCircular, said in an email to eSecurityPlanet.

Key takeaways of the Charter Communications incident

According to BleepingComputer :

Charter Communications confirmed an incident after the ShinyHunters group claimed it stole customer data from the company’s environment.

The threat actor alleged the breach began with a vishing attack that compromised a Microsoft Entra account and enabled access to Charter’s Salesforce environment.

ShinyHunters claimed…