Genesys Hack Exposes Customer Data From Internal Systems
Summary
Customer data was exposed from internal systems at Genesys following a hack. However, the company has confirmed that its core platforms, Genesys Cloud, Genesys Engage, and Genesys Engage Cloud, were not impacted by the incident.
IFF Assessment
FOE
This incident represents a data breach at a vendor, which is bad news for defenders as it means sensitive customer information has been compromised.
Defender Context
This incident highlights the importance of third-party risk management for organizations. Defenders need to be aware that a compromise at a vendor can lead to exposure of their own customer data. It underscores the need for robust security clauses in vendor contracts and continuous monitoring of supply chain risks.