The data transfer is a massive failure by Verizon, which fell for a low quality scam that may have put someone’s physical safety in danger.

The FBI investigated a man who allegedly posed as a police officer in emails and phone calls to trick Verizon to hand over phone data belonging to a specific person

Despite the relatively unconvincing cover story concocted by the suspect … Verizon handed over the victim’s data to the alleged stalker, including their address and phone logs. The stalker then went on to threaten the victim and ended up driving to where he believed the victim lived while armed with a knife

Version Security Assistance Team–Court Order Compliance Team (or VSAT CCT) received an email from steven1966c@proton.me.“Here is the pdf file for search warrant,” Glauner, allegedly pretending to be a police detective, wrote in the email. “We are in need if the this [sic] cell phone data as soon as possible to locate and apprehend this suspect. We also need the full name of this Verizon subscriber and the new phone number that has been assigned to her. Thank you.”

Verizon is not the only telecom that has failed to properly verify requests like this. In a somewhat similar case, I spoke to a victim who was stalked after someone posing as a U.S. Marshal tricked T-Mobile into handing over her phone’s location data.

  • fluckx@lemmy.world
    24·
    1 year ago

    So many red flags. It’s not even an official government email address. I get so many fake phishing attempts at work that are getting harder to detect, but this is what the fall for?

    I wonder how far you can get with Verizon by sending emails from the_fbi@gmail.com or something along those lines.

  • wincing_nucleus073@lemm.ee
    4·
    1 year ago

    seriously? they got duped by a random protonmail account? good grief, actual retards work for verizon.

    this should highlight why you should always protect yourself from these soulless uncaring corporate gargantuans that have zero desire to protect your basic data.

    use PO boxes, JMP.chat numbers, email aliases, etc. never give out info that can be used to screw you over.