← KPN

2012 KPN — 500+ customer credentials, email suspended

2012 500 records affected Share on X

Data compromised

Credentials, usernames, passwords, phones, addresses

Technical writeup

Hackers accessed KPN core routers via vulnerable servers. Stole credentials, usernames, passwords, phones, addresses from 500+ customers; posted on Pastebin. KPN suspended email for 2M customers. ACM fined KPN €364,000 for insufficient security. Later: employee convicted for passing customer data to cybercriminals.

Root cause

Hacking; vulnerable servers; insider

References