Threat Actor Claims Xacria XNO Breach Exposed 446 Orders and Subscriber Data
Summary
An unnamed threat actor claims to have breached Xacria XNO, alleging exposure of 446 service orders, subscriber data, telecom provisioning and circuit records, and reused webhook security tokens. The claims are unverified in the article.
Key points
- An unnamed threat actor claims to have breached Xacria XNO, a network orchestration platform used by FASTWEB and SKY ITALIA.
- The alleged dump reportedly contains 446 service orders across multiple telecom services.
- Reported subscriber information includes account numbers, IMSI, MSISDN, MAC addresses, and IP addresses.
- The claimed exposure also includes mobile provisioning records and enterprise circuit details.
- The article says hardcoded security tokens reused across XFlow webhook integrations were reportedly exposed.
Article Details
- Incident Type
- Threat actor-claimed breach and exposure of subscriber and telecom service data
- Data Types Exposed
- Subscriber personally identifiable information
- Account numbers
- IMSI
- MSISDN
- MAC addresses
- IP addresses
- Mobile provisioning records
- Enterprise circuit details
- Service orders
- Hardcoded security tokens reused across webhook integrations
- Affected Records
- 446 service orders
- Operational Impact
- Not disclosed
- Ransom Or Extortion
- None reported
- Claim Status
- claimed