What was the impact of the Cisco incident of May 01, 2022?

Question

Accepted Answer

The incident involved a sophisticated breach by the UNC2447 cybercrime gang, Lapsus$ threat actor group, and Yanluowang ransomware operators. They compromised a Cisco employee's personal Google account and used social engineering techniques such as voice phishing and MFA fatigue attacks to gain unauthorized access to Cisco's corporate network. Despite the attack, Cisco reported that no sensitive customer or employee data, intellectual property, or core services were affected. However, the attackers managed to steal and leak 2.75 GB of data containing 3100 files on the Dark Web, highlighting the critical need for robust security measures and employee awareness to mitigate such threats in the future.

Cisco Data Breach May 2022

Subscribe for weekly updates

Security Incident Summary

Organization

Threat Actor

Actor Type

Organization Details

VPN/SASE

IDS/IPS

EDR

MDM

SSO / MFA

IGA

WAF

SCA

CASB

CWPP

SIEM

TIP

What is Cisco?

Learn more about recent incidents