Verizon
Disclosed Jul 12, 20179 years ago225 affectedConfirmed
Vendor NICE Systems left Verizon customer call data in public S3 bucket
UpGuard found a publicly accessible Amazon S3 bucket run by a NICE Systems engineer holding names, addresses, account details and PINs of as many as 14 million Verizon customers; it was secured on June 22, 2017 after a June 13 notification.
What is known
| People affected | 225 (as reported by the organization) |
|---|---|
| Disclosed | Jul 12, 2017 |
| Attack | Exposed data |
| Data exposed | Names, Addresses, Phone numbers, Credentials and tokens |
| Sector | Telecom · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Cloud Leak: How A Verizon Partner Exposed Millions of Customer Accountsupguard.com · News | News |
| Indiana Attorney General 2017 data breach report: Verizonin.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jul 12, 2017 | |
| Indiana AGresidents of IN | Jul 19, 2017 | 2 |
Other breaches at Verizon
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Verizon insider accessed file with data of 63,206 employeesFeb 6, 20242 years agoInsiderUnverified | Feb 6, 20242 years ago | Insider | Telecom | Unverified | 63K |
| Disclosed May 31, 2019May 31, 20197 years ago | May 31, 20197 years ago | Not stated | Tech | Confirmed | 26 |
History of this record
- 2026-09-25 · source_type: press to official · backfill source
- 2026-09-25 · source_url: https://www.upguard.com/breaches/verizon-cloud-leak to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2017.pdf · backfill source
- 2026-09-25 · status: disclosed to confirmed · backfill source
- 2026-09-25 · verified_by: empty to in-ag · backfill source
- 2026-09-25 · verified: 0 to 1 · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 225 · backfill source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Indiana AG. Record counts are as reported. Not legal advice.