Cisco reports data breach after voice Phishing attack compromises third-party CRM system
Learn More
Cisco Systems is reporting a data breach affecting users registered on Cisco.com after a voice phishing attack successfully targeted one of the company's representatives on July 24, 2025.
The incident was caused by a sophisticated voice phishing (vishing) attack, where a malicious actor targeted a Cisco representative through a phone-based social engineering scheme, successfully tricking the employee into granting access to the third-party CRM platform. Security researchers have linked this attack to a broader wave of Salesforce data theft campaigns attributed to the ShinyHunters extortion group, which has been targeting companies including Qantas, Allianz Life, LVMH, Adidas, Chanel, and others using similar voice phishing techniques.
Exposed data includes:
- Names
- Organization names
- Physical addresses
- Cisco-assigned user IDs
- Email addresses
- Phone numbers
- Account metadata (such as creation dates)
The number of affected individuals has not been disclosed.
Following standard data breach protocols, Cisco engaged with relevant data protection authorities and notified affected users as required by applicable laws. The company is implementing additional security measures to prevent future incidents, including re-educating personnel on how to identify and protect against potential vishing attacks.
Cisco apologized for any inconvenience or concern the incident may have caused and encouraged customers and partners with additional questions to contact their account teams.
