Cox Communications has disclosed a data breach after a hacker was able to gain access to the personal information of its customers by impersonating a support agent.
The company’s customers recently began receiving letters in the mail informing them that an unknown person or persons had impersonated a Cox support agent in order access customer information.
The hacker likely employed social engineering as a means to gain access to Cox’s internal systems. Cox had launched an internal investigation into the matter and notified law enforcement of the incident.
“After further investigation, we discover that the unknown person(s) may have viewed certain types of information that are maintained in your Cox customer account, including your name, address, telephone number, Cox account number, Cox.net email address, username, PIN code, account security question and answer, and/or the types of services that you receive from Cox.”Cox Letter to Customers
Cox advising customers to monitor their financial accounts. In order to prevent any possible identity theft that may occur as a result of the breach, the company is also offering a free one-year subscription to Experian Identity Works to all affected customers.
We’ll likely hear more details regarding the data breach once Cox and law enforcement complete their respective investigations but in the meantime, Cox customers should change the password and security questions/answers for their accounts, look out for any phishing emails pretending to come from the company and enable two-factor authentication (2FA) for their accounts.