dtns

Key Telco Processing Company Discloses Five Year Breach - ThreatWire

Added 2021-10-05 19:53:23 +0000 UTC

By Shannon Morse, ThreatWire

Our ability to text each other doesn’t just end with your wireless carrier - like AT&T, Verizon, or T-Mobile. There’s another company that is crucial to their infrastructure called Syniverse, which provides processing of more than 740 billion text messages each year to 300 mobile operator clients all over the world. In fact, 95 out of 100 of the biggest telecoms use Syniverse as their backend for this processing. They route all of these messages between all the different carriers, along with management of routing and roaming between networks.

So it comes as little surprise that they’d be a target for cyberattacks. And indeed, that was the case, according to an SEC filing on September 27, where Syniverse disclosed that they found someone had unauthorized access to their systems FOR FIVE YEARS. This happened between May 2016 to May of 2021, when they finally discovered the breach. It seems like they had to disclose this information because they are going to go public through a merger with M3 Brigade Acquisition II Corp.

According to a previous employee of Syniverse, the company carries sensitive data like call records, text messages, data usage, length and cost for calls, phone numbers, and locations but it’s not known at this time if any of that data was compromised as well. Login information for 235 client companies was compromised, all were contacted and law enforcement was notified. Syniverse hasn’t disclosed any additional information regarding this hack at this time.

Support ThreatWire! https://www.patreon.com/threatwire