The company responsible for routing your SMS messages has been hacked

Incident is hopefully more embarrassing than damaging, suggests former employee

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

Hackers managed to break into Syniverse, a relatively unknown company that provides backbone services to major wireless carriers around the world, in a campaign that could have impacted millions ofcellphone users, reports suggest.

According toMotherboard, Syniverse forms a critical part of the global telecommunications infrastructure, and counts the likes ofAT&T,Verizon,Vodafone,T-Mobile, among its customers.

In a filingwith the US Security and Exchange Commission (SEC), the company disclosed that threat actors managed to gain “unauthorized access to databases within its network on several occasions, and that login information allowing access to or from its Electronic Data Transfer (EDT) environment was compromised for approximately 235 of its customers.”

We’re looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won’t take more than 60 seconds of your time, and we’d hugely appreciate if you’d share your experiences with us.

Click here to start the survey in a new window«

The incident, which was detected in May 2021, but dates back to May 2016, is discussed in the section where it talks about the risks associated with the company owing to the nature of its business.

Global privacy disaster?

Global privacy disaster?

Syniverse hasn’t discussed the incident outside of the SEC filing, and didn’t respond toMotherboard’squestions about the scope and scale of the breach.

However a former Syniverse employee disclosed that EDT systems have information on all types of call records. Another anonymous individual familiar with telephone carriers suggests that the Syniverse hackers could have had access to metadata such as length and cost, caller and receiver’s numbers, the location of the parties in the call, as well as the content of SMS text messages.

“Syniverse has access to the communication of hundreds of millions, if not billions, of people around the world. A five-year breach of one of Syniverse’s main systems is a global privacy disaster,” security researcher Karsten Nohl toldMotherboard.

Are you a pro? Subscribe to our newsletter

Are you a pro? Subscribe to our newsletter

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

However, the former Syniverse employee suggests the breach is probably more embarrassing than devastating since nothing untoward seems to have come out of it in over five years.

“Not saying nothing bad happened but it sounds like nothing did happen,” opines the former employees.

ViaMotherboard

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’sTechRadar Pro’sexpert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.

Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics

This new phishing strategy utilizes GitHub comments to distribute malware

Smeg Combi Steam Oven review: a multi-functional countertop oven that looks stunning and cooks well