Cisco Systems

Cisco disclosed in August 2025 that a voice-phishing call to a Cisco representative let an attacker export basic Cisco.com user-profile data from a third-party cloud CRM - an incident widely reported as part of the 2025 Salesforce social-engineering campaign, though Cisco itself named neither the vendor nor the actor. No exploit, no malware. That is not a criticism unique to Cisco; it is the point of the entire campaign, which reached more than a thousand organisations including Google and Workday by exploiting trust in a phone call and an OAuth prompt rather than any technical weakness. Cisco separately confirmed in October 2024 that data posted by the threat actor IntelBroker came from a public-facing DevHub environment. For consumers, Cisco's relevance is infrastructure: its equipment carries traffic for a large share of the internet and for most corporate networks.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — Cisco primarily serves enterprise/government customers rather than individual consumers directly.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.