RSUPPORT Reports Breach at RemoteCall SaaS Operations Site
Customer company names, operations administrator contacts and support agent emails were exposed, RSUPPORT said, adding it had blocked the access route.
RSUPPORT confirmed on October 28 that an external attacker gained unauthorized access to the SaaS operations site of its RemoteCall remote support service, exposing data belonging to some customer companies. The breach was discovered after anomalies were detected on an internal developer PC at the company, according to dailysecu.com.
The data confirmed as leaked so far includes customer company names, the contact details of customer operations administrators and the email addresses of support agents. RSUPPORT has not disclosed how many companies were affected or the full scale of the leaked personal data.
The company said it blocked the unauthorized access route and reported the incident to the Korea Internet & Security Agency (KISA) on October 29.
RSUPPORT stated that it has found no evidence so far that personal data of end customers or remote support data handled by customer companies was leaked.
Advice to customers
RSUPPORT advised customers not to open links or attachments in emails and text messages from unknown origins.
Quick answers
What data was leaked in the RSUPPORT breach?
Customer company names, customer operations administrator contact details and support agent email addresses, according to RSUPPORT.
Was RemoteCall customer data exposed?
RSUPPORT said it has found no evidence so far that end-customer personal data or remote support data handled by customer companies was leaked.
When was KISA notified?
RSUPPORT reported the breach to KISA on October 29, a day after confirming the unauthorized access.