AI-Powered Call Center Breach Exposes 10.2 Million Conversations in Middle East
Cybersecurity firm Resecurity discovered a breach of an unnamed AI-powered call center platform in the Middle East that exposed over 10.2 million conversations including personally identifiable information. The attackers accessed the platform's management dashboard and could use the data for fraud, phishing and social engineering schemes.
What happened
Cybersecurity firm Resecurity identified a breach of an unnamed AI-powered call center platform in the Middle East. Attackers gained unauthorized access to the platform's management dashboard and collected over 10.2 million interactions between consumers, operators and AI agents.
The breach exposed personally identifiable information (PII) including national ID documents. Resecurity reported the breach had been mitigated after alerting affected parties and law enforcement.
Reported impact
The stolen data could be leveraged for advanced fraud, phishing schemes and other malicious activities. Attackers could mine PII for use in phishing and social engineering schemes, hijack conversations to convince victims to reveal payment details, or intercept AI-assisted communications between users and human operators.
Index analysis
Conversational AI platforms are increasingly used across industries to improve customer service, but they pose significant threats to data privacy if compromised. Many organizations using such platforms do not fully disclose their data protection and data retention practices, operating as a 'black box'.
Governance controls
Resecurity noted that protection of conversational AI platforms will require a balance between traditional cybersecurity measures relevant to SaaS and those specialized and tailored to the specifics of AI.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.