Zendesk Details

Zendesk

San Francisco, California • employees • Technology

Industry

Technology

Security Incidents

Zendesk, Inc. is a Danish-American company headquartered in San Francisco, California. It provides software-as-a-service products related to customer support, sales, and other customer communications.

Security Incidents

Zendesk Breach of Oct 2022

Severity Score

Significant to High

Type

Data Breach

Summary

In October 2022, Zendesk experienced a cybersecurity breach when phishing attacks on employees allowed unauthorized access to a legacy logging platform. This incident was discovered during routine monitoring and spanned from September 25 to October 26, 2022. The attackers accessed unstructured data, including support ticket information and customer email addresses, but no passwords or financial information were compromised. Zendesk collaborated with external security experts to contain the breach and enhance security measures. They notified affected customers, such as the cryptocurrency compan...
Show more

Severity

The breach was severe as it involved an advanced SMS phishing attack targeting Zendesk employees, leading to unauthorized access to unstructured data from a logging platform for a month. The attackers gained entry into Zendesk's network and compromised sensitive information through a sophisticated campaign.

Impact

The breach impacted Zendesk's security posture significantly, exposing unstructured data and potentially compromising customer information. While the exact number of affected customers was not disclosed, the breach raised concerns about data security and the effectiveness of employee training in recognizing phishing attempts.