Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.
3CX data breach overview:
- Who: Officials at the Cybersecurity and Infrastructure Agency issued a warning following a confirmed cyberattack and data breach against phone software company 3CX’s desktop app.
- Why: 3CX believes the cyberattack may have been done by a state-sponsored hacking group that officials warn is planning to use its unauthorized access to conduct attacks against desktop app users.
- Where: Consumers around the world use 3CX’s desktop app.
- What are my options: NortonLifeLock carries many options when it comes to cybersecurity.
U.S. cybersecurity officials have warned hundreds of thousands of 3CX clients worldwide may be affected by a recent cyberattack against the phone software company’s video conferencing desktop app.
The nation-state-backed group the company believes may be behind the cyberattack is planning to use its unauthorized access to conduct additional attacks against desktop app users, officials at the Cybersecurity and Infrastructure Agency warn, according to Law360.
3CX, which says it has more than 600,000 customers and 12 million users in a total of 190 countries, reportedly has confirmed the data breach and that the application had been infected with malware.
“This appears to have been a targeted attack … perhaps even state-sponsored, that ran a complex supply chain attack and picked who would be downloading the next stages of their malware,” 3CX CISO Pierre Jourdan said in a March 30 statement.
Jourdain also “strongly” suggested 3CX customers use its Progressive Web App (PWA), noting it is “completely web based and does 95% of what the electron app does.”
“The advantage is that it does not require any installation or updating and chrome web security is applied automatically,” Jourdain said.
3CX CEO instructs customers to uninstall and reinstall desktop app to get security update
In a separate post March 30, 3CX CEO Nick Galea instructed customers to uninstall and reinstall the desktop app to get a version equipped with a security update, while also suggesting using the company’s PWA client.
“We strongly recommend using our PWA client instead,” Galea wrote. “It really does 99% of the client app and is fully web based and this type of thing can never happen.”
In March, Accutech agreed to a class action settlement to resolve claims revolving around its handling of an August 2021 data breach that exposed personal information, including Social Security numbers and financial account numbers.
Have you been affected by the cyberattack against 3CX’s desktop app? Let us know in the comments!
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
