Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.
Twilio data breach overview:
- Who: Digital communication platform Twilio revealed that a “limited number” of customer accounts were compromised in a data breach this month.
- Why: Twilio blames the data breach on a “sophisticated social engineering attack” that allowed hackers to gain access to some of its internal systems.
- Where: Twilio is a service used nationwide.
Digital communication platform Twilio has revealed it suffered a data breach after its employees were tricked into revealing their login credentials through a “sophisticated social engineering attack.”
Twilio revealed in a blog post that a phishing campaign was responsible for the data breach, though it noted that only a “limited number” of accounts were affected.
The Twilo data breach reportedly occurred on Aug. 4 after a hacker sent an SMS message to Twilio employees instructing them to reset their password or that there was a change in their schedules.
Twilio employees were then directed to a mock sign-in page where hackers were able to access the information inputted, giving them access to some of the company’s internal systems.
“This broad based attack against our employee base succeeded in fooling some employees into providing their credentials,” Twilio says in the blog post.
Twilio says it has since revoked access to the employee accounts that were compromised in the data breach and that it has engaged a “leading forensics team” to investigate how the incident occurred.
Twilio data breach ‘reemphasized’ security training, company says
The company says it has also “reemphasized our security training” to make sure its employees are on “high alert” for possible social engineering attacks going forward.
“Trust is paramount at Twilio, and, we know the security of our systems is an important part of earning and keeping your trust. We sincerely apologize that this happened,” Twilo says.
Twilio is a service that enables companies, including Uber, Airbnb and Twitter, to send SMS messages and make phone calls over a telephone network, The Verge reports.
The company says it began individually notifying customers who may have been affected by the data breach. If a customer is not contacted about the breach, it means there is no evidence their account was impacted, Twilio says.
In related data breach news, Capital One agreed to pay $190 million earlier this month to resolve claims it allowed the information of around 98 million of its customers to become compromised during a 2019 data breach.
Was your information compromised in the Twilo data breach? Let us know in the comments!
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
