Bain Capital Discloses Data Breach Following Targeted Vishing Campaign Against Private Equity Firms

Summary

Bain Capital suffered a data breach after a vishing campaign by threat actor UNC6671 compromised employee credentials and bypassed multi-factor authentication to access sensitive cloud storage folders. The incident exposed names, Social Security numbers, and financial information of a limited group, prompting the firm to offer two years of credit monitoring.

Read the full article on BeyondMachines

---

This article was originally published on BeyondMachines